Leaderboard
548All-time rank
Pike V1
Apr 30, 2024
$1.6M
Lost
$1.6M
Recovered
$0
Net loss
$1.6M
Unrecovered0% recovered
Pike upgraded spoke contracts with new dependencies that altered storage layout, particularly the 'initialized' variable. On April 30, 2024, this storage misalignment allowed attackers to upgrade contracts, bypass admin access, and withdraw funds.
39 ETH.
- Target
- DeFi
- Classification
- Access Control
- Technique
- Proxy Upgrade Hijack
- Attribution
- Unknown
- Chains
EthereumOptimismArbitrum
Event timeline
- Apr 30, 2024Exploit executed — $1.6M drained via proxy upgrade hijack
- Attributed to Unknown
- Recovery status Unrecovered 0%