Leaderboard
720All-time rank
L
Lever
Nov 27, 2021
$652K
Lost
$652K
Recovered
$0
Net loss
$652K
Unrecovered0% recovered
Attacker exploited Lever's liability calculation to execute a flash loan attack using two malicious contracts. Contract A borrowed 2,100 BNB and deposited 2,000 into Lever's vault for interest-bearing tokens, then borrowed 1,500 BNB.
Contract B received the collateral without Lever verifying that the xWBNB wasn't already used as collateral, allowing repayment with uncollateralized borrowed funds.
- Target
- DeFi
- Classification
- Protocol Logic
- Technique
- Borrow Logic Flaw
- Attribution
- Unknown
- Chains
BSC
Event timeline
- Nov 27, 2021Exploit executed — $652K drained via borrow logic flaw
- Attributed to Unknown
- Recovery status Unrecovered 0%