Leaderboard
598All-time rank
T
Telcoin
Dec 25, 2023
$1.3M
Lost
$1.3M
Recovered
$0
Net loss
$1.3M
Unrecovered0% recovered
Telcoin's Polygon wallet proxy contracts were uninitialized, allowing an attacker to initialize dormant wallets with malicious versions and drain user funds that had never executed transactions.
How the exploit worked
View reproducible PoCStorage Collision.
Lost: ~1,24M
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- Other
- Classification
- Access Control
- Technique
- Uninitialized Proxy
- Attribution
- Unknown
- Chains
Polygon
Event timeline
- Dec 25, 2023Exploit executed — $1.3M drained via uninitialized proxy
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)