Leaderboard
549All-time rank
Flooring Protocol
Dec 17, 2023
$1.6M
Lost
$1.6M
Recovered
$0
Net loss
$1.6M
Unrecovered0% recovered
Flooring Protocol's contract upgrade introduced a vulnerability in its multicall mechanism that lacked proper context isolation. Attackers exploited this to call transferFrom on user NFT approvals without consent, stealing 36 Pudgy Penguins and 14 Bored Apes.
- Target
- DeFi
- Classification
- Access Control
- Technique
- Arbitrary External Call
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Dec 17, 2023Exploit executed — $1.6M drained via arbitrary external call
- Attributed to Unknown
- Recovery status Unrecovered 0%