Digital Asset
Intelligence
Security Incident

DaoSwap Reward Mechanism Flaw: $580.00K Reported Loss

·Historical incident record

Incident Overview

On September 5th, DaoSwap lost 580,000 USDT in an attack that allowed users to set the inviter’s address as themselves due to mining rewards that were larger than the fees charged during the swap process and lack of verification.

Sources & References

Original incident referencehttps://twitter.com/BlockSecTeam/status/1566606770650300416 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Nereus

    Attack methodFlash Loan Attack
    Reported loss371,000 USDC
  2. Incident date
    Attack methodMalicious Code Injection Attack
    Reported loss$ 265,000
  3. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 10,000
  4. Incident date
    Target

    $TENDRIL

    Attack methodSmart Contract Vulnerability
    Reported loss$ 555000
  5. Incident date
    Attack methodUnknown
    Reported lossNot disclosed