Leaderboard
1133All-time rank
SF
Spectra Finance
Jul 24, 2024
$73K
Lost
$73K
Recovered
$0
Net loss
$73K
Unrecovered0% recovered
On July 24, 2024, Spectra Protocol's router contract was exploited for approximately $73,000 via an arbitrary call vulnerability in the execute function. The attacker crafted inputData to manipulate contract calls with arbitrary parameters, draining 188 quadrillion asdCRV tokens (inflated representation) from approved wallets.
How the exploit worked
View reproducible PoCIncorrect input validation.
Lost: ~73K USD
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Access Control
- Technique
- Arbitrary External Call
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Jul 24, 2024Exploit executed — $73K drained via arbitrary external call
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)