Leaderboard
156All-time rank
C
Curio
Mar 25, 2024
$16.0M
Lost
$16.0M
Recovered
$0
Net loss
$16.0M
Unrecovered0% recovered
Curio exploited March 23-25, 2024 via access control flaw in voting power. Attacker with small CGT stake escalated voting power to execute delegatecall to malicious contract, minting ~1B CGT worth $16M.
- Target
- DeFi
- Classification
- Access Control
- Technique
- Delegatecall Hijack
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Mar 25, 2024Exploit executed — $16.0M drained via delegatecall hijack
- Attributed to Unknown
- Recovery status Unrecovered 0%