Leaderboard
876All-time rank
Conic Finance logo

Conic Finance

Jul 22, 2023

$300K
Lost
$300K
Recovered
$0
Net loss
$300K
Unrecovered0% recovered

On July 21-22, 2023, Conic Finance suffered two exploits via read-only reentrancy in CurveLPOracleV2. 26 million from the ETH omnipool; a second exploit of $300K occurred shortly after.

How the exploit worked

View reproducible PoC

Read-Only-Reentrancy && MisConfiguration.

Lost: ~$3.25M

Source: DeFiHackLabs (SunWeb3Sec)

Target
DeFi
Classification
Oracle Manipulation
Technique
Spot Price Manipulation
Attribution
Unknown
Chains
Ethereum

Event timeline

  1. Jul 22, 2023
    Exploit executed — $300K drained via spot price manipulation
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents