Leaderboard
344All-time rank
Gamma
Jan 4, 2024
$4.5M
Lost
$4.5M
Recovered
$0
Net loss
$4.5M
Unrecovered0% recovered
5M via flashloan-induced price manipulation. The vault deposit thresholds were set too high (-50% to +100% price swings), allowing attackers to manipulate underlying asset prices and drain vault positions.
How the exploit worked
View reproducible PoCPrice manipulation.
Lost: ~6.3M
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Oracle Manipulation
- Technique
- Spot Price Manipulation
- Attribution
- Unknown
- Chains
Arbitrum
Event timeline
- Jan 4, 2024Exploit executed — $4.5M drained via spot price manipulation
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)