Leaderboard
832All-time rank
Themis Protocol
Jun 27, 2023
$370K
Lost
$370K
Recovered
$0
Net loss
$370K
Unrecovered0% recovered
Themis Protocol relied on DEX spot prices without flashloan protection. Attackers used flashloans to manipulate BLP prices via large wstETH swaps, borrowing assets at inflated collateral values.
How the exploit worked
View reproducible PoCManipulation of prices using Flashloan.
Lost: ~$370k
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Oracle Manipulation
- Technique
- Spot Price Manipulation
- Attribution
- Unknown
- Chains
Arbitrum
Event timeline
- Jun 27, 2023Exploit executed — $370K drained via spot price manipulation
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)