Leaderboard
681All-time rank
R
R0AR
Apr 16, 2025
$780K
Lost
$780K
Recovered
$0
Net loss
$780K
Unrecovered0% recovered
R0ARStaking contract contained a backdoor embedded by an external developer during deployment. The backdoor directly modified storage slots to set a falsified balance for the attacker's address, which was then extracted using the emergency withdrawal function.
- Target
- DeFi
- Classification
- Access Control
- Technique
- Improper Access Control
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Apr 16, 2025Exploit executed — $780K drained via improper access control
- Attributed to Unknown
- Recovery status Unrecovered 0%