Leaderboard
690All-time rank
MOBOX logo

MOBOX

Mar 15, 2024

$750K
Lost
$750K
Recovered
$0
Net loss
$750K
Unrecovered0% recovered

MOBOX borrow function exploited by cyclically borrowing and redeeming funds while incrementally increasing loan amounts. Referral rewards were transferred back to the contract to inflate the next borrow, netting ~$750K USDT.

How the exploit worked

View reproducible PoC

business logic flaw.

Lost: ~413k USDT

Source: DeFiHackLabs (SunWeb3Sec)

Target
DeFi
Classification
Protocol Logic
Technique
Borrow Logic Flaw
Attribution
Unknown
Chains
Optimism

Event timeline

  1. Mar 15, 2024
    Exploit executed — $750K drained via borrow logic flaw
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents