Leaderboard
447All-time rank
Nemo Yield Trading
Sep 8, 2025
$2.6M
Lost
$2.6M
Recovered
$0
Net loss
$2.6M
Unrecovered0% recovered
59M when unaudited code left an internal flash-loan function publicly callable and a query function able to mutate state, enabling the attacker to drain the Market pool and bridge to Ethereum.
- Target
- DeFi
- Classification
- Access Control
- Technique
- Improper Access Control
- Attribution
- Unknown
- Chains
Sui
Event timeline
- Sep 8, 2025Exploit executed — $2.6M drained via improper access control
- Attributed to Unknown
- Recovery status Unrecovered 0%