Leaderboard
1011All-time rank
Y
YIEDL
Apr 24, 2024
$150K
Lost
$150K
Recovered
$0
Net loss
$150K
Unrecovered0% recovered
On April 24, 2024, the YIEDL protocol on BSC was exploited via insufficient input validation on the dataList parameter in the redeem function. An attacker bypassed redemption share requirements by manipulating the dataList parameter and profited from repeated token exchanges totaling approximately $150K.
How the exploit worked
View reproducible PoCInput Validation.
Lost: 150k USD
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Input Validation
- Technique
- Missing Input Validation
- Attribution
- Unknown
- Chains
BSC
Event timeline
- Apr 24, 2024Exploit executed — $150K drained via missing input validation
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)