Leaderboard
793All-time rank
PF
Predy Finance
May 14, 2024
$464K
Lost
$464K
Recovered
$0
Net loss
$464K
Unrecovered0% recovered
Predy Finance's PredyPool contract lacked adequate access control in the take() function, allowing attackers to manipulate the liabilities array and drain liquidity from existing trading pairs via flash loans.
How the exploit worked
View reproducible PoCReentrancy.
Lost: $464K
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Access Control
- Technique
- Improper Access Control
- Attribution
- Unknown
- Chains
Arbitrum
Event timeline
- May 14, 2024Exploit executed — $464K drained via improper access control
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)