Digital Asset
Intelligence
Security Incident

Degen.Money Double Authorization Vulnerability

·Historical incident record

Incident Overview

Twitter users reported that DeFi's liquidity mining project Degen.Money exploited a double approval vulnerability to get users' Money. The first authorization gives the pledge contract, and the second authorization gives the right to transfer money, which will result in the user's funds being taken away by the attacker. YFI founder Andre Cronje says the project does have risks.

Sources & References

Original incident referencehttps://www.panewslab.com/zh/articledetails/1598608813032363.html (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Ledger

    Attack methodInformation Leakage
    Reported lossNot disclosed
  2. Incident date
    Target

    NZX

    Attack methodDDoS Attack
    Reported lossNot disclosed
  3. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 10,000
  4. Incident date
    Target

    $TENDRIL

    Attack methodSmart Contract Vulnerability
    Reported loss$ 555000
  5. Incident date
    Attack methodUnknown
    Reported lossNot disclosed