Leaderboard
1138All-time rank
S

SheepFarm

Nov 16, 2022

$72K
Lost
$72K
Recovered
$0
Net loss
$72K
Unrecovered0% recovered

On November 16, 2022, SheepFarm gaming token on BSC was exploited via a register function that failed to update user timestamps after registration, allowing an attacker to call it multiple times to increase gems yield and drain approximately 262 BNB (~$72K). The attacker then converted the accumulated yield to BNB and withdrew.

How the exploit worked

View reproducible PoC

No input validation.

Lost: ~1BNB

Source: DeFiHackLabs (SunWeb3Sec)

Target
DeFi
Classification
Input Validation
Technique
Missing Input Validation
Attribution
Unknown
Chains
BSC

Event timeline

  1. Nov 16, 2022
    Exploit executed — $72K drained via missing input validation
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents