Leaderboard
1061All-time rank
M

MetaSea

May 17, 2026

$110K
Lost
$110K
Recovered
$0
Net loss
$110K
Unrecovered0% recovered

MetaSea's redeemPosition function overpaid SEA yield from a shared distributor without blocking just-in-time openings and redemptions in the same block. 2M input), and sell the SEA back for USDT.

Running 8 identical attacks back-to-back, the attacker extracted $110K aggregate across multiple blocks.

Target
DeFi
Classification
Protocol Logic
Technique
Withdrawal Logic Flaw
Attribution
Unknown
Chains
Arbitrum

Event timeline

  1. May 17, 2026
    Exploit executed — $110K drained via withdrawal logic flaw
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents