Leaderboard
265All-time rank
JP

Jimbos Protocol

May 28, 2023

$7.5M
Lost
$7.5M
Recovered
$0
Net loss
$7.5M
Unrecovered0% recovered

On May 28, 2023, Jimbos Protocol on Arbitrum (launched <20 days prior) was exploited for 4,090 ETH via flashloan-enabled oracle manipulation. 9M flashloan and manipulated JIMBO price to exploit shift/conversion logic lacking slippage protection.

How the exploit worked

View reproducible PoC

Protocol Specific Price Manipulation.

Lost: ~$8M

Source: DeFiHackLabs (SunWeb3Sec)

Target
DeFi
Classification
Oracle Manipulation
Technique
Spot Price Manipulation
Attribution
Unknown
Chains
Arbitrum

Event timeline

  1. May 28, 2023
    Exploit executed — $7.5M drained via spot price manipulation
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents