Digital Asset
Intelligence
Security Incident · ETH Ecosystem

brahTOPG Contract Vulnerability: $89.88K Reported Loss

·Historical incident record

Incident Overview

According to the monitoring of the SlowMist security team, the brahTOPG project on the ETH chain was attacked, and the attacker made a profit of about $89,879. The main reason for this attack is that the Zapper contract strictly checks the data passed in by the user, which leads to the problem of arbitrary external calls. The attacker uses this arbitrary external call problem to steal the tokens of users who are still authorized to the contract.

Sources & References

Original incident referencehttps://twitter.com/SlowMist_Team/status/1590685173477101570 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodReentrancy Attack
    Reported loss$ 231,138
  2. Incident date
    Target

    Loopring

    Attack methodDDoS Attack
    Reported lossNot disclosed
  3. Incident date
    Target

    Deribit

    Attack methodWallet Stolen
    Reported loss$ 28,000,000
  4. Incident date
    Target

    FTX

    Attack methodTelegram was hacked
    Reported loss$ 600,000,000
  5. Incident date
    Attack methodFlash Loan Attack
    Reported loss$ 143,921