Leaderboard
1387All-time rank
L
Libertify
Jul 11, 2023
$230
Lost
$230
Recovered
$0
Net loss
$230
Unrecovered0% recovered
A reentrancy vulnerability in LibertiVault's deposit function allowed attackers to mint excess shares by re-entering before totalSupply was updated. The attacker used flash loans to deposit funds, called deposit() recursively, and claimed inflated rewards before the state was finalized.
How the exploit worked
View reproducible PoCReentrancy.
Lost: ~$452k
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Reentrancy
- Technique
- Reentrancy
- Attribution
- Unknown
- Chains
EthereumPolygon
Event timeline
- Jul 11, 2023Exploit executed — $230 drained via reentrancy
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)