Leaderboard
881All-time rank
T
TheStandard.io
Nov 6, 2023
$290K
Lost
$290K
Recovered
$0
Net loss
$290K
Unrecovered0% recovered
io was exploited when an attacker initiated a CDP with 10 WBTC collateral to mint 290K EUROs, then forced a manipulated swap in the WBTC/PAXG pool. Lack of slippage protection (amountOutMinimum = 0) combined with low liquidity enabled the attack.
How the exploit worked
View reproducible PoCLack of slippage protection.
Lost: ~$290K
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Protocol Logic
- Technique
- Swap Logic Flaw
- Attribution
- Unknown
- Chains
Arbitrum
Event timeline
- Nov 6, 2023Exploit executed — $290K drained via swap logic flaw
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)