Leaderboard
1148All-time rank
Paribus logo

Paribus

Apr 11, 2023

$68K
Lost
$68K
Recovered
$0
Net loss
$68K
Unrecovered0% recovered

Paribus was exploited through a reentrancy vulnerability in a Compound V2 fork, where the transfer occurred before storage updates. An attacker used flash loans and the reentrant redeem function to borrow against collateral twice, draining USDT, WBTC, and ETH.

How the exploit worked

View reproducible PoC

Reentrancy.

Lost: $100k

Source: DeFiHackLabs (SunWeb3Sec)

Target
DeFi
Classification
Reentrancy
Technique
Reentrancy
Attribution
Unknown
Chains
Arbitrum

Event timeline

  1. Apr 11, 2023
    Exploit executed — $68K drained via reentrancy
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents