Leaderboard
1203All-time rank
Z

ZoomerCoin

Feb 24, 2024

$41K
Lost
$41K
Recovered
$0
Net loss
$41K
Unrecovered0% recovered

A flash loan attack on ZoomerCoin exploited constructed calldata parameters to call transferFrom, transferring tokens previously authorized to the project contract. Attackers then exchanged stolen tokens for ETH.

How the exploit worked

View reproducible PoC

Business Logic Flaw.

Lost: ~14 ETH

Source: DeFiHackLabs (SunWeb3Sec)

Target
DeFi
Classification
Governance
Technique
Flashloan Governance Attack
Attribution
Unknown
Chains
Ethereum

Event timeline

  1. Feb 24, 2024
    Exploit executed — $41K drained via flashloan governance attack
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents