Digital Asset
Intelligence
Security Incident · Exchange

CometDEX Smart Contract Vulnerability: $717.52K Reported Loss

·Historical incident record

Incident Overview

The BLND-USDC liquidity pool of CometDEX (Comet AMM) on the Stellar network was exploited due to an accounting bug that allowed same-asset swaps (USDC→USDC), corrupting reserve calculations. The attacker used flash loans from a Blend pool and repeated the process about 36 times to extract excess funds, resulting in a loss of approximately $717,518.92 USDC. Funds were subsequently moved.

Sources & References

Original incident referencehttps://x.com/blend_capital/status/2092288347766984713 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 18600
  2. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 403,000
  3. Incident date
    Target

    Binance

    Attack methodInternal System Intrusion
    Reported loss$ 6,340,000,000
  4. Incident date
    Target

    FH Token

    Attack methodSmart Contract Vulnerability
    Reported loss$ 20,000
  5. Incident date
    Target

    Enjin

    Attack methodSmart Contract Vulnerability
    Reported loss$ 162,000