Leaderboard
1173All-time rank
Juicebox V3
Apr 20, 2026
$52K
Lost
$52K
Recovered
$0
Net loss
$52K
Unrecovered0% recovered
77 ETH (~$52,000). Attacker exploited unvalidated source struct in borrowFrom to forge accounting context; by matching forged and destination currencies, attacker bypassed oracle and priced loan against inflated share price using attacker-controlled decimals.
- Target
- DeFi
- Classification
- Input Validation
- Technique
- Missing Input Validation
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Apr 20, 2026Exploit executed — $52K drained via missing input validation
- Attributed to Unknown
- Recovery status Unrecovered 0%
