Leaderboard
1335All-time rank
S
SATURN
May 7, 2024
$9K
Lost
$9K
Recovered
$0
Net loss
$9K
Unrecovered0% recovered
SATURN's transfer logic had a flaw where sync operations were performed before processing incoming token transfers. This allowed attackers to manipulate token reserves via flash loans and extract approximately 15 WBNB from the pool.
How the exploit worked
View reproducible PoCPrice Manipulation.
Lost: ~15 BNB
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Oracle Manipulation
- Technique
- Spot Price Manipulation
- Attribution
- Unknown
- Chains
BNB
Event timeline
- May 7, 2024Exploit executed — $9K drained via spot price manipulation
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)