Digital Asset
Intelligence
Security Incident · Exchange

dYdX Contract Vulnerability: $211.00K Reported Loss

·Historical incident record

Incident Overview

DeFi Derivatives Agreement dYdX released an investigation report on the deposit contract accident on November 27, stating that there has been a serious loophole in the agent smart contract that has been handling deposits to the dYdX exchange since November 24. At around 12:00 UTC on the 27th, dYdX The team performed a white hat hacking operation to save vulnerable user funds, totaling approximately US$2 million. These funds are sent to a non-custodial escrow contract, and only the original owner of these funds can retrieve them. However, when the dYdX team performed the white hat hacking operation, an estimated $211,000 of funds was used by the MEV robot, and the user has now been fully compensated.

Sources & References

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    dYdX

    Attack methodContract deployment error
    Reported lossNot disclosed
  2. Incident date
    Target

    dYdX

    Attack methodPrice Manipulation
    Reported loss$ 9,000,000
  3. Incident date
    Target

    dYdX

    Attack methodDNS Attack
    Reported loss$ 31,000
  4. Incident date
    Attack methodFlash Loan Attack
    Reported loss$ 975,720
  5. Incident date
    Target

    Lever

    Attack methodFlash Loan Attack
    Reported loss$ 652941.949