Leaderboard
838All-time rank
SIR
Mar 30, 2025
$355K
Lost
$355K
Recovered
$0
Net loss
$355K
Unrecovered0% recovered
trading on Ethereum was exploited for $355K via callback validation flaw. Vault contract's callback did not validate Uniswap pool address, allowing replacement with attacker-controlled address via transient storage manipulation (one of first Dencun-targeted exploits).
- Target
- DeFi
- Classification
- Access Control
- Technique
- Proxy Upgrade Hijack
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Mar 30, 2025Exploit executed — $355K drained via proxy upgrade hijack
- Attributed to Unknown
- Recovery status Unrecovered 0%
