Leaderboard
201All-time rank
Rari Capital logo

Rari Capital

May 8, 2021

$10.0M
Lost
$10.0M
Recovered
$0
Net loss
$10.0M
Unrecovered0% recovered

totalETH() to withdraw more ETH than deposited, draining ~$11M from Rari's Ethereum Pool.

How the exploit worked

View reproducible PoC

Cross Contract Reentrancy.

Source: DeFiHackLabs (SunWeb3Sec)

Target
DeFi
Classification
Access Control
Technique
Arbitrary External Call
Attribution
Unknown
Chains
Ethereum

Event timeline

  1. May 8, 2021
    Exploit executed — $10.0M drained via arbitrary external call
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents