Leaderboard
476All-time rank
Onyx Protocol
Nov 1, 2023
$2.1M
Lost
$2.1M
Recovered
$0
Net loss
$2.1M
Unrecovered0% recovered
1M. An attacker used a 4,000 ETH flashloan, swapped to PEPE, and donated to inflate the new oPEPE market's exchange rate, exploiting rounding errors in redemption logic.
How the exploit worked
View reproducible PoCPrecission Loss Vulnerability.
Lost: ~$2M
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Token & Share Accounting
- Technique
- Donation Attack
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Nov 1, 2023Exploit executed — $2.1M drained via donation attack
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)