Leaderboard
104All-time rank
Spartan logo

Spartan

May 2, 2021

$30.5M
Lost
$30.5M
Recovered
$0
Net loss
$30.5M
Unrecovered0% recovered

On May 1, 2021, Spartan Protocol on BSC suffered the first flashloan attack on the chain, losing $30M. An attacker obtained a 100k WBNB flashloan, inflated the liquidity pool's asset balance through multiple transactions, then burned pool tokens to withdraw an unfair share because the contract checked current balance instead of cached balance.

How the exploit worked

View reproducible PoC

Logic Flaw.

Lost: $30.5M

Source: DeFiHackLabs (SunWeb3Sec)

Target
DeFi
Classification
Token & Share Accounting
Technique
Incorrect Share Accounting
Attribution
Unknown
Chains
BSC

Event timeline

  1. May 2, 2021
    Exploit executed — $30.5M drained via incorrect share accounting
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents