Leaderboard
1113All-time rank
BF
Brahma Finance
Nov 9, 2022
$89K
Lost
$89K
Recovered
$0
Net loss
$89K
Unrecovered0% recovered
On November 9, 2022, Brahma Finance's TopGear vault on Ethereum was exploited via an arbitrary external call vulnerability in the Zapper contract, where the swapTarget parameter was not validated, allowing an attacker to construct malicious call data and drain 89,343 USDC from three authorized user accounts.
- Target
- DeFi
- Classification
- Access Control
- Technique
- Arbitrary External Call
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Nov 9, 2022Exploit executed — $89K drained via arbitrary external call
- Attributed to Unknown
- Recovery status Unrecovered 0%