Leaderboard
343All-time rank
EF
Eleven Finance
Jun 22, 2021
$4.5M
Lost
$4.5M
Recovered
$0
Net loss
$4.5M
Unrecovered0% recovered
5M via a logic flaw in emergencyBurn(). The attacker used flashloans to obtain assets, converted them to Nerve-bridged tokens, and deposited them into MasterMind.
The function failed to burn shares, allowing repeated withdrawals from the same position.
How the exploit worked
View reproducible PoCDoesn’t burn shares.
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Protocol Logic
- Technique
- Withdrawal Logic Flaw
- Attribution
- Unknown
- Chains
BSC
Event timeline
- Jun 22, 2021Exploit executed — $4.5M drained via withdrawal logic flaw
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)