Leaderboard
667All-time rank
HOPE Lend
Oct 18, 2023
$825K
Lost
$825K
Recovered
$0
Net loss
$825K
Unrecovered0% recovered
HopeLend was exploited via a precision loss vulnerability in hToken's share calculation during the _handleFlashLoanRepayment function. The attacker minted tiny PEPE shares, donated large volumes to distort the exchange rate, then borrowed ETH using rounding errors in the redeemUnderlying function.
How the exploit worked
View reproducible PoCDiv Precision Loss.
Lost: ~$825K
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Token & Share Accounting
- Technique
- Arithmetic Error
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Oct 18, 2023Exploit executed — $825K drained via arithmetic error
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)