Leaderboard
70All-time rank
UF
Uranium Finance
Apr 28, 2021
$57.2M
Lost
$57.2M
Recovered
$0
Net loss
$57.2M
Unrecovered0% recovered
Uranium Finance on BSC suffered a calculation error in its v2 pair swap function. The sanity check validation used an incorrect constant (1,000,000) that was 100x too large compared to actual balance adjustments (10,000), allowing attackers to send minimal value and extract maximum reserves through the swap function.
How the exploit worked
View reproducible PoCMiscalculation.
Lost: $50 million
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Token & Share Accounting
- Technique
- Arithmetic Error
- Attribution
- Unknown
- Chains
BSC
Event timeline
- Apr 28, 2021Exploit executed — $57.2M drained via arithmetic error
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)