Leaderboard
944All-time rank
QM

QuickSwap Market

Oct 24, 2022

$220K
Lost
$220K
Recovered
$0
Net loss
$220K
Unrecovered0% recovered

On October 24, 2022, QuickSwap's Market XYZ lending market on Polygon was exploited for $220K via a read-only reentrancy vulnerability in the Curve LP Oracle. An attacker used a flash loan to manipulate spot prices, inflating collateral values to drain assets from the market.

The exploit affected LDO, MATIC, and staked MATIC tokens, leading QuickSwap to shut down its lending service.

Target
DeFi
Classification
Oracle Manipulation
Technique
Spot Price Manipulation
Attribution
Unknown
Chains
Polygon

Event timeline

  1. Oct 24, 2022
    Exploit executed — $220K drained via spot price manipulation
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents