Leaderboard
152All-time rank
BearnFi
May 17, 2021
$18.0M
Lost
$18.0M
Recovered
$0
Net loss
$18.0M
Unrecovered0% recovered
BearnFi's BvaultsBank contract interpreted deposit amounts inconsistently between BUSD and ibBUSD. Attackers exploited this via flashloan cycles to inflate withdrawal amounts.
How the exploit worked
View reproducible PoCLogic Flaw.
Lost: 11M
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Protocol Logic
- Technique
- Withdrawal Logic Flaw
- Attribution
- Unknown
- Chains
BSC
Event timeline
- May 17, 2021Exploit executed — $18.0M drained via withdrawal logic flaw
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)