Leaderboard
519All-time rank
MERLIN DEX logo

MERLIN DEX

Apr 25, 2023

$1.8M
Lost
$1.8M
Recovered
$0
Net loss
$1.8M
Unrecovered0% recovered

82 million. The attacker drained pools through the feeTo address in MerlinFactory which had unlimited asset transfer permissions and lacked multi-sig governance.

Target
DeFi
Classification
Rugpull
Technique
Admin Drain
Attribution
Unknown
Chains
zkSync Era

Event timeline

  1. Apr 25, 2023
    Exploit executed — $1.8M drained via admin drain
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents