Leaderboard
289All-time rank
Seneca
Feb 28, 2024
$6.4M
Lost
$6.4M
Recovered
$0
Net loss
$6.4M
Unrecovered0% recovered
Seneca Protocol's Chamber contract was exploited on February 28, 2024 via improper token approval handling that allowed unauthorized transfers of ~1,900 ETH and 50,000 senUSD. The attacker later returned 80% of funds after being offered a 20% bounty.
How the exploit worked
View reproducible PoCArbitrary External Call Vulnerability.
Lost: ~6M
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Access Control
- Technique
- Token Approval Abuse
- Attribution
- Unknown
- Chains
EthereumArbitrum
Event timeline
- Feb 28, 2024Exploit executed — $6.4M drained via token approval abuse
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)