Leaderboard
180All-time rank
Defrost
Dec 24, 2022
$12.0M
Lost
$12.0M
Recovered
$6.0M
Net loss
$6.0M
Majority50% recovered
On December 24, 2022, Defrost Finance on Avalanche suffered two coordinated attacks: V2 flashloan drained $173K via LSWUSDC price manipulation; V1 admin key compromise allowed minting 100M H20 and draining ~$12M USDT via fake oracle. All funds were later returned.
How the exploit worked
View reproducible PoCReentrancy.
Lost: $170k
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Key Compromise
- Technique
- Private Key Compromised
- Attribution
- Unknown
- Chains
Avalanche
Event timeline
- Dec 24, 2022Exploit executed — $12.0M drained via private key compromised
- Attributed to Unknown
- Recovery status Majority 50%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)