Leaderboard
534All-time rank
Paraluni Masterchef
Mar 13, 2022
$1.7M
Lost
$1.7M
Recovered
$0
Net loss
$1.7M
Unrecovered0% recovered
7M on March 13, 2022 to a flashloan-funded reentrancy attack. Attacker borrowed 157K USDT and 157K BUSD via PancakeSwap, exploited depositByAddLiquidity's missing pool ID validation, and triggered reentrancy via malicious transferFrom before state updated.
How the exploit worked
View reproducible PoCFlashloan & Reentrancy.
Lost: $1.7 million
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Reentrancy
- Technique
- Reentrancy
- Attribution
- Unknown
- Chains
BSC
Event timeline
- Mar 13, 2022Exploit executed — $1.7M drained via reentrancy
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)