Digital Asset
Intelligence
Security Incident · ETH Ecosystem

ATOHook Smart Contract Vulnerability: $25.00K Reported Loss

·Historical incident record

Incident Overview

ATOHook smart contract was exploited due to a storage slot collision between the rewards mapping and Solady’s fixed ReentrancyGuard slot. The nonReentrant modifier in getReward() wrote a sentinel value that was misinterpreted as a reward balance for a colliding address, allowing the attacker to repeatedly claim and drain a fixed amount of ETH (200 times), stealing approximately 14.41 ETH.

Sources & References

Original incident referencehttps://x.com/SlowMist_Team/status/2063576945552462201 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    TESSERA

    Attack methodPrivate Key Leakage
    Reported loss$ 2,400,000
  2. Incident date
    Attack methodOff-Chain Vulnerability in the Bridge Backend
    Reported loss$ 815,000
  3. Incident date
    Attack methodPrivate Key Leakage
    Reported loss$ 5,400,000
  4. Incident date
    Target

    ApeBond

    Attack methodSmart Contract Vulnerability
    Reported loss$ 3,421
  5. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss0