Leaderboard
685All-time rank
Sturdy V1
Jun 12, 2023
$775K
Lost
$775K
Recovered
$0
Net loss
$775K
Unrecovered0% recovered
On June 12, 2023, Sturdy Finance was drained of ~$800K via a flashloan-funded read-only reentrancy attack on Balancer pools during oracle checks, inflating B-stETH-STABLE prices.
How the exploit worked
View reproducible PoCRead-Only-Reentrancy.
Lost: ~$800k
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Reentrancy
- Technique
- Read-Only Reentrancy
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Jun 12, 2023Exploit executed — $775K drained via read-only reentrancy
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)