Leaderboard
1178All-time rank
Poloniex
Mar 4, 2014
$50K
Lost
$50K
Recovered
$0
Net loss
$50K
Unrecovered0% recovered
An attacker discovered a race condition in Poloniex's withdrawal processing logic. By submitting multiple concurrent withdrawal requests, the attacker could deplete accounts to negative balances before the system updated withdrawal state, extracting 97 BTC without having that balance.
- Target
- CEX
- Classification
- Protocol Logic
- Technique
- Withdrawal Logic Flaw
- Attribution
- North Korea
- Chains
Bitcoin
Event timeline
- Mar 4, 2014Exploit executed — $50K drained via withdrawal logic flaw
- Attributed to North Korea
- Recovery status Unrecovered 0%