Leaderboard
155All-time rank
Indexed Finance
Oct 14, 2021
$16.0M
Lost
$16.0M
Recovered
$0
Net loss
$16.0M
Unrecovered0% recovered
On October 14, 2021, Indexed Finance's DEFI5 and CC10 pools were drained of $16M via a sophisticated flashloan attack. The attacker used massive flashloans to knock pool balances out of equilibrium, purchased component assets at heavily discounted rates, and executed the entire attack within a single transaction.
How the exploit worked
View reproducible PoCPrice Manipulation.
Lost: $16M
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Oracle Manipulation
- Technique
- Spot Price Manipulation
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Oct 14, 2021Exploit executed — $16.0M drained via spot price manipulation
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)