Leaderboard
732All-time rank
L
LI.FI
Mar 21, 2022
$600K
Lost
$600K
Recovered
$0
Net loss
$600K
Unrecovered0% recovered
FI's swap aggregator was exploited via unchecked external calls in the swap contract. The attacker drained $600,000 from 29 user wallets that had granted infinite token approvals.
How the exploit worked
View reproducible PoCBridges.
Lost: $570K
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Access Control
- Technique
- Token Approval Abuse
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Mar 21, 2022Exploit executed — $600K drained via token approval abuse
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)