Leaderboard
1250All-time rank
VF
Vista Finance
Oct 22, 2024
$28K
Lost
$28K
Recovered
$0
Net loss
$28K
Unrecovered0% recovered
Vista Finance's integration of ERC20FlashMint with staking logic failed to properly distinguish staked from free balances, allowing flashMint to incorrectly calculate available free balance for loans despite tokens being staked.
How the exploit worked
View reproducible PoCflashmint receive error.
Lost: $28,000
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Token & Share Accounting
- Technique
- Incorrect Share Accounting
- Attribution
- Unknown
- Chains
BSC
Event timeline
- Oct 22, 2024Exploit executed — $28K drained via incorrect share accounting
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)