Leaderboard
252All-time rank
OP

Origin Protocol

Nov 17, 2020

$7.7M
Lost
$7.7M
Recovered
$0
Net loss
$7.7M
Unrecovered0% recovered

On 2020-11-17 at 00:47:19 UTC an attacker exploited a flash-loan-funded reentrancy in OUSD VaultCore's mint function to inflate totalSupply. The contract failed to validate the transferred-in asset and lacked reentrancy protection, allowing the attacker to redeem against the inflated supply and drain the vault.

Target
DeFi
Classification
Reentrancy
Technique
Reentrancy
Attribution
Unknown
Chains
Ethereum

Event timeline

  1. Nov 17, 2020
    Exploit executed — $7.7M drained via reentrancy
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents