Digital Asset
Intelligence
Security Incident · ETH Ecosystem

DFXFinance Reentrancy Attack: $231.14K Reported Loss

·Historical incident record

Incident Overview

The DFX Finance project on the ETH chain was attacked, and the attackers made a profit of about $231,138. According to SlowMist analysis, the main reason for this attack is that the Curve contract flash loan function does not have re-entrancy protection, which causes the attack to re-enter the deposit function to transfer tokens to judge the balance of flash loan repayments. The account so that the attacker can successfully withdraw money to profit.

Sources & References

Original incident referencehttps://www.odaily.news/newsflash/304558 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    brahTOPG

    Attack methodContract Vulnerability
    Reported loss$ 89,879
  2. Incident date
    Target

    Loopring

    Attack methodDDoS Attack
    Reported lossNot disclosed
  3. Incident date
    Target

    Deribit

    Attack methodWallet Stolen
    Reported loss$ 28,000,000
  4. Incident date
    Target

    Flare

    Attack methodRug Pull
    Reported loss$ 18,500,000
  5. Incident date
    Target

    FTX

    Attack methodTelegram was hacked
    Reported loss$ 600,000,000