Leaderboard
269All-time rank
BurgerSwap
May 28, 2021
$7.2M
Lost
$7.2M
Recovered
$0
Net loss
$7.2M
Unrecovered0% recovered
2M in BURGER, WBNB, and USDC. Missing code line in Uniswap V2 fork enabled reentrancy.
Attacker created a fake token to manipulate price, then executed profitable swaps funded by a PancakeSwap flashloan.
How the exploit worked
View reproducible PoCMathematical flaw + Reentrancy.
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Reentrancy
- Technique
- Reentrancy
- Attribution
- Unknown
- Chains
BSC
Event timeline
- May 28, 2021Exploit executed — $7.2M drained via reentrancy
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)