Leaderboard
57All-time rank
Rari Capital
May 1, 2022
$80.0M
Lost
$80.0M
Recovered
$0
Net loss
$80.0M
Unrecovered0% recovered
Rari Capital's Fuse lending pools were exploited via a reentrancy vulnerability in exitMarket() when an attacker used a Balancer flashloan to deposit collateral, then recursively borrowed assets and withdrew collateral before borrow records were updated, stealing approximately 28,380 ETH and related assets.
How the exploit worked
View reproducible PoCFlashloan Attack + Reentrancy.
Lost: $80 million
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Reentrancy
- Technique
- Reentrancy
- Attribution
- Unknown
- Chains
EthereumArbitrum
Event timeline
- May 1, 2022Exploit executed — $80.0M drained via reentrancy
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)