Digital Asset
Intelligence
Security Incident

DeltaPrime Contract Vulnerability: $1.00M Reported Loss

·Historical incident record

Incident Overview

On July 23, an attacker exploited a misconfiguration to gain access to $1 million from 13 different Prime accounts. This misconfiguration allowed the attacker to illegitimately transfer ownership of the Prime accounts to their own address, enabling them to repay loans and withdraw collateral. On July 24, the attacker returned $900,000.

Sources & References

Original incident referencehttps://medium.com/@Delta_Prime/deltaprime-post-mortem-report-752bd60a25e6 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodPrivate Key Leakage
    Reported loss$ 5,980,000
  2. Incident date
    Attack methodContract Vulnerability
    Reported loss$ 4,750,000
  3. Incident date
    Attack methodAccount Compromise
    Reported lossNot disclosed
  4. Incident date
    Target

    dYdX

    Attack methodDNS Attack
    Reported loss$ 31,000
  5. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 10,000