Leaderboard
705All-time rank
UN
Umbrella Network
Mar 20, 2022
$700K
Lost
$700K
Recovered
$0
Net loss
$700K
Unrecovered0% recovered
Umbrella Network's Polar Stream staking contracts on Ethereum and BSC suffered an unchecked underflow in the withdrawal function. The attacker drained LP tokens and used them to withdraw liquidity from UMB-ETH Uniswap and UMB-BNB Pancakeswap pools.
How the exploit worked
View reproducible PoCUnderflow.
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Access Control
- Technique
- Improper Access Control
- Attribution
- Unknown
- Chains
EthereumBSC
Event timeline
- Mar 20, 2022Exploit executed — $700K drained via improper access control
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)