Leaderboard
221All-time rank
PP
Punk Protocol
Aug 10, 2021
$8.9M
Lost
$8.9M
Recovered
$0
Net loss
$8.9M
Unrecovered0% recovered
95M when attacker used delegatecall to rerun unguarded Initialize function, changing forge address to gain withdrawal control. White-hat frontran and recovered ~$5M, keeping $1M as finder's fee.
- Target
- DeFi
- Classification
- Access Control
- Technique
- Delegatecall Hijack
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Aug 10, 2021Exploit executed — $8.9M drained via delegatecall hijack
- Attributed to Unknown
- Recovery status Unrecovered 0%