Leaderboard
831All-time rank
O
Opyn
Aug 4, 2020
$371K
Lost
$371K
Recovered
$0
Net loss
$371K
Unrecovered0% recovered
value was checked inside a loop but only the first batch of ETH was actually received. Attackers called exercise() with multiple vaults in a single transaction, reusing the same ETH batch to withdraw collateral multiple times.
How the exploit worked
View reproducible PoCmsgValue in loop.
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Protocol Logic
- Technique
- Withdrawal Logic Flaw
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Aug 4, 2020Exploit executed — $371K drained via withdrawal logic flaw
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)