Digital Asset
Intelligence
Security Incident · ETH Ecosystem

Slice Smart Contract Vulnerability: $41.00K Reported Loss

·Source-attributed incident record

Incident Overview

Slice (onchain commerce protocol) suffered an exploit in its FundsModule where the 0x9d2edfac function trusted release amounts returned by caller-selected source contracts without verifying that corresponding ETH or USDC was actually received. The attacker used two contracts that returned nonzero amounts while transferring no assets, enabling immediate withdrawals of ~$41k from pooled reserves to the attacker.

Sources & References

Original incident referencehttps://x.com/SlowMist_Team/status/2112746806585274454 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 90,500
  2. Incident date
    Target

    Initia

    Attack methodZero-day vulnerability
    Reported loss$ 2,700,000
  3. Incident date
    Target

    X100

    Attack methodFlash Loan Governance Attack
    Reported loss$ 4,850,000
  4. Incident date
    Attack methodPrivate Key Leakage
    Reported loss$ 20000
  5. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 59,800