Leaderboard
1273All-time rank
F
FireToken
Oct 1, 2024
$20K
Lost
$20K
Recovered
$0
Net loss
$20K
Unrecovered0% recovered
FireToken's transfer function automatically burned tokens sent to Uniswap pools and immediately updated reserve balances, allowing attackers to artificially inflate ETH price by reducing FireToken reserves, then repeatedly swapped FireTokens for overpriced ETH.
How the exploit worked
View reproducible PoCPair Manipulation With Transfer Function.
Lost: 8.45 ETH (~$20K USD)
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Oracle Manipulation
- Technique
- Spot Price Manipulation
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Oct 1, 2024Exploit executed — $20K drained via spot price manipulation
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)