Leaderboard
824All-time rank
Poolz Network
Mar 15, 2023
$390K
Lost
$390K
Recovered
$0
Net loss
$390K
Unrecovered0% recovered
Poolz Finance was exploited through an integer overflow vulnerability in the unaudited LockedControl contract. The attacker manipulated the CreateMassPools function and GetArraySum method to trick the vesting contract into believing large amounts were deposited while actually depositing minimal tokens.
How the exploit worked
View reproducible PoCinteger overflow.
Lost: ~$390K
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Token & Share Accounting
- Technique
- Arithmetic Error
- Attribution
- Unknown
- Chains
BSC
Event timeline
- Mar 15, 2023Exploit executed — $390K drained via arithmetic error
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)