Leaderboard
400All-time rank
Conic Finance
Jul 21, 2023
$3.3M
Lost
$3.3M
Recovered
$0
Net loss
$3.3M
Unrecovered0% recovered
3M ETH Omnipool, $934K crvUSD Omnipool) via read-only reentrancy in CurveLPOracleV2. Price manipulation extracted value from asset pools; audit findings hadn't covered this contract.
How the exploit worked
View reproducible PoCPrice Manipulation.
Lost: ~$934K
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Reentrancy
- Technique
- Read-Only Reentrancy
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Jul 21, 2023Exploit executed — $3.3M drained via read-only reentrancy
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)