Leaderboard
1192All-time rank
L
LPC
Jul 25, 2022
$45K
Lost
$45K
Recovered
$0
Net loss
$45K
Unrecovered0% recovered
LPC's _transfer function incorrectly calculated balances when sender and recipient addresses were the same. Attackers used a flashloan to exploit this logic error and extract value.
How the exploit worked
View reproducible PoC=recipient in transfer.
Lost: 178 BNB (~45,715 US$)
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Token & Share Accounting
- Technique
- Arithmetic Error
- Attribution
- Unknown
- Chains
Binance Smart Chain
Event timeline
- Jul 25, 2022Exploit executed — $45K drained via arithmetic error
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)