Leaderboard
1204All-time rank
SF
Sorra Finance
Jan 4, 2025
$41K
Lost
$41K
Recovered
$0
Net loss
$41K
Unrecovered0% recovered
Sorra Finance's staking contract had a critical flaw in the getPendingRewards() function that failed to track and deduct previously claimed rewards. The attacker deposited 122,868 SOR tokens with a 14-day lockup, then repeatedly called withdraw() to claim the same rewards multiple times before the state was updated.
- Target
- DeFi
- Classification
- Protocol Logic
- Technique
- Reward Logic Flaw
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Jan 4, 2025Exploit executed — $41K drained via reward logic flaw
- Attributed to Unknown
- Recovery status Unrecovered 0%