Leaderboard
1219All-time rank
Neutra Finance
Aug 1, 2023
$36K
Lost
$36K
Recovered
$0
Net loss
$36K
Unrecovered0% recovered
Neutra Finance's convert() function used spot price to value LP tokens, but two LP tokens with the same name (CMLT-LP) from different pools could be swapped for each other. An attacker exploited this by converting from one LP token pool (CMLT-LP-65eb) to the other (CMLT-LP-2ea3), extracting value from the price differential.
How the exploit worked
View reproducible PoCPrice Manipulation.
Lost: ~$23ETH
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Oracle Manipulation
- Technique
- Spot Price Manipulation
- Attribution
- Unknown
- Chains
Arbitrum
Event timeline
- Aug 1, 2023Exploit executed — $36K drained via spot price manipulation
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)