Leaderboard
140All-time rank
MR
MEV-Boost Relay
Apr 3, 2023
$20.0M
Lost
$20.0M
Recovered
$0
Net loss
$20.0M
Unrecovered0% recovered
A malicious Ethereum validator exploited a flaw in the mev-boost-relay implementation by crafting an invalid block header with zero parent and state roots, bypassing validation and gaining visibility of block contents. The attacker front-ran and replaced MEV bot transactions to drain approximately $20M over 24 transactions.
- Target
- Other
- Classification
- Frontend & Infrastructure
- Technique
- Key Leaked via Infrastructure
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Apr 3, 2023Exploit executed — $20.0M drained via key leaked via infrastructure
- Attributed to Unknown
- Recovery status Unrecovered 0%