Leaderboard
485All-time rank
Rari Capital
Dec 18, 2025
$2.0M
Lost
$2.0M
Recovered
$0
Net loss
$2.0M
Unrecovered0% recovered
On December 10, 2025, Rari Capital Fuse lending pools (dormant after prior $80M+ hacks) were exploited for $2M via unprotected proxy upgrade vulnerability. Attacker hijacked implementation contract to gain admin privileges and enable uncollateralized borrowing.
- Target
- DeFi
- Classification
- Access Control
- Technique
- Uninitialized Proxy
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Dec 18, 2025Exploit executed — $2.0M drained via uninitialized proxy
- Attributed to Unknown
- Recovery status Unrecovered 0%