Leaderboard
30All-time rank
Parity Multisig
Nov 9, 2017
$150M
Lost
$150M
Recovered
$0
Net loss
$150M
Unrecovered0% recovered
On November 8, 2017, a user called 'devops199' accidentally exploited a vulnerability in Parity's multi-sig wallet library contract by calling initWallet then kill(), permanently disabling over 500 multi-sig wallets containing approximately 500,000 ETH. The library lacked protection against reinitialization and destruction by non-owners.
How the exploit worked
View reproducible PoC'Accidentally Killed It'.
Lost: 514k ETH
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Access Control
- Technique
- Uninitialized Proxy
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Nov 9, 2017Exploit executed — $150M drained via uninitialized proxy
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)