Leaderboard
1149All-time rank
M
MainnetSettler
Nov 20, 2024
$66K
Lost
$66K
Recovered
$0
Net loss
$66K
Unrecovered0% recovered
On November 20, 2024, the MainnetSettler contract was exploited through an approval vulnerability that allowed arbitrary calls. Users with Hold token approvals to MainnetSettler had their tokens drained when attackers executed transferFrom calls, resulting in approximately $66K in losses.
How the exploit worked
View reproducible PoCAccess Control.
Lost: $66K
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Access Control
- Technique
- Token Approval Abuse
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Nov 20, 2024Exploit executed — $66K drained via token approval abuse
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)