Leaderboard
521All-time rank
BonqDAO
Feb 1, 2023
$1.8M
Lost
$1.8M
Recovered
$0
Net loss
$1.8M
Unrecovered0% recovered
On February 1, 2023, BonqDAO's collateral pricing read directly from TellorFlex's last reported value with no TWAP, dispute delay, or bounds. 65M BEUR against near-worthless collateral, then reversed the price to liquidate other troves.
Nominal damage was ~$120M but illiquidity capped realized gains to ~$1-2M.
How the exploit worked
View reproducible PoCPrice Oracle Manipulation.
Lost: BEUR stablecoin and ALBT Token (~88M US$)
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Oracle Manipulation
- Technique
- Oracle Misconfiguration
- Attribution
- Unknown
- Chains
Polygon
Event timeline
- Feb 1, 2023Exploit executed — $1.8M drained via oracle misconfiguration
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)