Leaderboard
900All-time rank
EA

Ethereum Alarm Clock

Oct 20, 2022

$260K
Lost
$260K
Recovered
$0
Net loss
$260K
Unrecovered0% recovered

On October 20, 2022, Ethereum Alarm Clock's transaction scheduling protocol was exploited via a gas fee refund calculation vulnerability where the cancel() function calculated refunds too high when given inflated transaction fees, allowing attackers to call cancel with high gas prices and extract approximately 204 ETH (~$260K) in overpaid refunds.

Target
DeFi
Classification
Protocol Logic
Technique
Reward Logic Flaw
Attribution
Unknown
Chains
Ethereum

Event timeline

  1. Oct 20, 2022
    Exploit executed — $260K drained via reward logic flaw
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents