Leaderboard
1317All-time rank
Lixir Finance
Jun 25, 2026
$12K
Lost
$12K
Recovered
$0
Net loss
$12K
Unrecovered0% recovered
On June 25, 2026, Lixir Finance vaults were exploited via insufficient nonce validation in permit() function. Attacker reused a single non-owner signature across 41 calls on six vault clones to gain allowances and extract USDC, USDT, ETH, and LIX tokens.
- Target
- DeFi
- Classification
- Input Validation
- Technique
- Signature Verification Flaw
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Jun 25, 2026Exploit executed — $12K drained via signature verification flaw
- Attributed to Unknown
- Recovery status Unrecovered 0%