Leaderboard
1376All-time rank
U
uniclyNFT
Sep 16, 2023
$2K
Lost
$2K
Recovered
$0
Net loss
$2K
Unrecovered0% recovered
A reentrancy vulnerability in uniclyNFT's PointFarm contract allowed an attacker to repeatedly call the deposit() function without proper state updates. The attacker minted rewards multiple times before the contract could update rewardDebt, draining uJENNY tokens through reentrancy into external calls.
How the exploit worked
View reproducible PoCReentrancy.
Lost: 1 NFT
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Reentrancy
- Technique
- Reentrancy
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Sep 16, 2023Exploit executed — $2K drained via reentrancy
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)