Leaderboard
1257All-time rank
OTSea
Sep 13, 2024
$26K
Lost
$26K
Recovered
$0
Net loss
$26K
Unrecovered0% recovered
OTSea's staking contract had a logical defect in reward calculation and state tracking that allowed attackers to manipulate reward variables and continuously withdraw staking rewards beyond their actual stake.
How the exploit worked
View reproducible PoCLogic Flaw.
Lost: 26k
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Protocol Logic
- Technique
- Reward Logic Flaw
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Sep 13, 2024Exploit executed — $26K drained via reward logic flaw
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)