Leaderboard
523All-time rank
D
Dolomite
Mar 20, 2024
$1.8M
Lost
$1.8M
Recovered
$0
Net loss
$1.8M
Unrecovered0% recovered
An old Dolomite DEX contract on Ethereum (deployed 2019) was exploited via a reentrancy vulnerability. The attacker bypassed the noEntry reentrancy guard by calling the callFunction through the TradeManager contract, which lacked proper reentrancy protection, allowing recursive fund drainage from users who had approved the contract.
- Target
- DeFi
- Classification
- Access Control
- Technique
- Improper Access Control
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Mar 20, 2024Exploit executed — $1.8M drained via improper access control
- Attributed to Unknown
- Recovery status Unrecovered 0%