Leaderboard
968All-time rank
Unilend V2
Jan 12, 2025
$198K
Lost
$198K
Recovered
$0
Net loss
$198K
Unrecovered0% recovered
6K when attacker used a flash loan to deposit 60M USDC, then exploited stale balance references in the userBalanceOfToken function to manipulate health factor calculations and withdraw 60 stETH.
How the exploit worked
View reproducible PoCLogic Flaw.
Lost: 60 stETH
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Protocol Logic
- Technique
- Redeem Logic Flaw
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Jan 12, 2025Exploit executed — $198K drained via redeem logic flaw
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)