Leaderboard
104All-time rank
Spartan
May 2, 2021
$30.5M
Lost
$30.5M
Recovered
$0
Net loss
$30.5M
Unrecovered0% recovered
On May 1, 2021, Spartan Protocol on BSC suffered the first flashloan attack on the chain, losing $30M. An attacker obtained a 100k WBNB flashloan, inflated the liquidity pool's asset balance through multiple transactions, then burned pool tokens to withdraw an unfair share because the contract checked current balance instead of cached balance.
How the exploit worked
View reproducible PoCLogic Flaw.
Lost: $30.5M
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Token & Share Accounting
- Technique
- Incorrect Share Accounting
- Attribution
- Unknown
- Chains
BSC
Event timeline
- May 2, 2021Exploit executed — $30.5M drained via incorrect share accounting
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)
