Leaderboard
1309All-time rank
FP

Fractal Protocol

May 24, 2026

$14K
Lost
$14K
Recovered
$0
Net loss
$14K
Unrecovered0% recovered

e via re-entrant flashloan attack. The attacker looped through Balancer V2 batchSwap callbacks to recursively call the vault's deposit and withdraw functions.

The vault's tokenPrice accrued only once daily and its share arithmetic rounded favorably for the depositor, allowing each re-entrant round-trip to extract more than it put in.

How the exploit worked

View reproducible PoC

Business Logic Flaw.

Lost: ~$13.7K

Source: DeFiHackLabs (SunWeb3Sec)

Target
DeFi
Classification
Reentrancy
Technique
Reentrancy
Attribution
Unknown
Chains
Arbitrum

Event timeline

  1. May 24, 2026
    Exploit executed — $14K drained via reentrancy
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents