Leaderboard
1218All-time rank
O

OWNLY

May 10, 2022

$37K
Lost
$37K
Recovered
$0
Net loss
$37K
Unrecovered0% recovered

OWNLY's unstake function lacked claim status validation, allowing attackers to repeatedly call unstake() and extract 930M OWN tokens without authorization. The staking contract was drained of ~$37K in BNB equivalent before discovery.

Target
DeFi
Classification
Protocol Logic
Technique
Withdrawal Logic Flaw
Attribution
Unknown
Chains
Binance Smart Chain

Event timeline

  1. May 10, 2022
    Exploit executed — $37K drained via withdrawal logic flaw
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents