Leaderboard
79All-time rank
KyberSwap Elastic
Nov 22, 2023
$48.0M
Lost
$48.0M
Recovered
$0
Net loss
$48.0M
Unrecovered0% recovered
On November 22, 2023, KyberSwap Elastic was exploited via a double rounding error in computeSwapStep() that allowed the final swap price to exceed the target threshold without updating liquidity state. The attacker used strategic swaps to corrupt baseL and drain $48M across multiple networks.
How the exploit worked
View reproducible PoCprecision loss.
Lost: ~$48M
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Token & Share Accounting
- Technique
- Rounding Error
- Attribution
- Unknown
- Chains
EthereumBasePolygonOptimismArbitrum
Event timeline
- Nov 22, 2023Exploit executed — $48.0M drained via rounding error
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)