Leaderboard
835All-time rank
P
Ploutoz
Nov 23, 2021
$365K
Lost
$365K
Recovered
$0
Net loss
$365K
Unrecovered0% recovered
Attacker manipulated the DOP token price on Ploutoz Finance and used it as collateral to borrow CAKE, ETH, BTCB and other assets. After exchanging borrowed tokens to BNB via ParaSwap and PancakeSwap, attacker cashed out through Tornado Cash.
Initial funds for the attack were withdrawn from Tornado Cash, indicating pre-planned coordination.
How the exploit worked
View reproducible PoCFlash Loan.
Lost: 365K
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Oracle Manipulation
- Technique
- Spot Price Manipulation
- Attribution
- Unknown
- Chains
BSC
Event timeline
- Nov 23, 2021Exploit executed — $365K drained via spot price manipulation
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)