Leaderboard
838All-time rank
SIR logo

SIR

Mar 30, 2025

$355K
Lost
$355K
Recovered
$0
Net loss
$355K
Unrecovered0% recovered

trading on Ethereum was exploited for $355K via callback validation flaw. Vault contract's callback did not validate Uniswap pool address, allowing replacement with attacker-controlled address via transient storage manipulation (one of first Dencun-targeted exploits).

Target
DeFi
Classification
Access Control
Technique
Proxy Upgrade Hijack
Attribution
Unknown
Chains
Ethereum

Event timeline

  1. Mar 30, 2025
    Exploit executed — $355K drained via proxy upgrade hijack
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents