Leaderboard
925All-time rank
Curve LlamaLend
Mar 2, 2026
$240K
Lost
$240K
Recovered
$0
Net loss
$240K
Unrecovered0% recovered
Attacker flash-loaned 10M USDC and 15,986 WETH from Morpho Blue to manipulate sDOLA vault exchange rate, triggering liquidations of 27 borrowers in sDOLA/crvUSD market for ~$240K profit. convertToAssets() as spot price without atomic-manipulation protection.
How the exploit worked
View reproducible PoCShare price manipulation.
Lost: ~240,000 US$
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Token & Share Accounting
- Technique
- Donation Attack
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Mar 2, 2026Exploit executed — $240K drained via donation attack
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)