Leaderboard
403All-time rank
ZF
Zabu Finance
Sep 12, 2021
$3.2M
Lost
$3.2M
Recovered
$0
Net loss
$3.2M
Unrecovered0% recovered
On September 12, 2021, Zabu Finance's ZABUFarm contract on Avalanche failed to account for deflationary token transfer fees. Attacker was credited with full input amount despite fees, draining liquidity.
How the exploit worked
View reproducible PoCDeflationary token uncompatible.
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Protocol Logic
- Technique
- Deposit Logic Flaw
- Attribution
- Unknown
- Chains
Avalanche
Event timeline
- Sep 12, 2021Exploit executed — $3.2M drained via deposit logic flaw
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)