Leaderboard
1309All-time rank
FP
Fractal Protocol
May 24, 2026
$14K
Lost
$14K
Recovered
$0
Net loss
$14K
Unrecovered0% recovered
e via re-entrant flashloan attack. The attacker looped through Balancer V2 batchSwap callbacks to recursively call the vault's deposit and withdraw functions.
The vault's tokenPrice accrued only once daily and its share arithmetic rounded favorably for the depositor, allowing each re-entrant round-trip to extract more than it put in.
How the exploit worked
View reproducible PoCBusiness Logic Flaw.
Lost: ~$13.7K
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Reentrancy
- Technique
- Reentrancy
- Attribution
- Unknown
- Chains
Arbitrum
Event timeline
- May 24, 2026Exploit executed — $14K drained via reentrancy
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)
