Digital Asset
Intelligence
Security Incident

Convergence Finance Contract Vulnerability: $210.00K Reported Loss

·Historical incident record

Incident Overview

Convergence Finance was attacked. 58M CVG have been minted and sold by the hacker for approximately $210,000 ( the whole portion of tokens dedicated to staking emissions); Approximately $2,000 of unclaimed rewards from Convex have also been stolen. A lack of validation in the input given by the user in the function claimMultipleStaking of the reward distribution contract is the root cause of the exploit.

Sources & References

Original incident referencehttps://medium.com/@cvg_wireshark/post-mortem-08-01-2024-e80a49d108a0 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Starknet

    Attack methodAccount Compromise
    Reported lossNot disclosed
  2. Incident date
    Target

    Terra

    Attack methodThird-party Vulnerability
    Reported loss$ 5,280,000
  3. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 10,000
  4. Incident date
    Target

    $TENDRIL

    Attack methodSmart Contract Vulnerability
    Reported loss$ 555000
  5. Incident date
    Attack methodUnknown
    Reported lossNot disclosed