Leaderboard
1206All-time rank
S
SliceFundsModule
Oct 20, 2026
$41K
Lost
$41K
Recovered
$0
Net loss
$41K
Unrecovered0% recovered
permissionless entry point (0x9d2edfac) credits each caller-supplied source's returned amount as a deposit without verifying the module's balance rose, then pays it out of pooled reserves when the flag is set.
How the exploit worked
View reproducible PoCpermissionless entry point (0x9d2edfac) credits each caller-supplied source's returned amount as a deposit without verifying the module's balance rose, then pays it out of pooled reserves when the flag is set.
Lost: ~$41K drained from Slice's FundsModule on Base: 8.716935563284127414 ETH and 19,820.734002 USDC to the attacker EOA. The attacker first calls 0x9d2edfac with…
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Protocol Logic
- Technique
- permissionless entry point (0x9d2edfac) credits each call…
- Attribution
- Unknown
- Chains
Event timeline
- Oct 20, 2026Exploit executed — $41K drained via permissionless entry point (0x9d2edfac) credits each call…
- Attributed to Unknown
- Recovery status Unrecovered 0%