Leaderboard
858All-time rank
The Idols
Jan 14, 2025
$324K
Lost
$324K
Recovered
$0
Net loss
$324K
Unrecovered0% recovered
The Idols NFT contract had a flaw in the _beforeTokenTransfer function that incorrectly handled reward distribution when sender and recipient were the same address. By repeatedly calling safeTransferFrom with identical from/to addresses, an attacker exploited the logic flaw to drain 97 stETH from the reward pool.
- Target
- DeFi
- Classification
- Protocol Logic
- Technique
- Reward Logic Flaw
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Jan 14, 2025Exploit executed — $324K drained via reward logic flaw
- Attributed to Unknown
- Recovery status Unrecovered 0%