Digital Asset
Intelligence
Security Incident · ETH Ecosystem

ether.fi Liquid Smart Contract Vulnerability: $38.13K Reported Loss

·Historical incident record

Incident Overview

Users of ether.fi Liquid (liquidETH) lost ~15.45 ETH after an attacker exploited missing access control in AtomicQueue.solve() on the caller-supplied solver parameter. The attacker crafted a malicious AtomicRequest, forced already-approved victim addresses to act as solver, and drained funds via existing ERC-20 allowances with transferFrom. About 11 users were affected.

Sources & References

Original incident referencehttps://x.com/SlowMist_Team/status/2098344499923784048 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    OMNI404

    Attack methodSmart Contract Vulnerability
    Reported loss$ 5,923
  2. Incident date
    Target

    Symbiosis

    Attack methodSmart Contract Vulnerability
    Reported loss$ 775,000
  3. Incident date
    Target

    Spiral

    Attack methodPrice Manipulation
    Reported loss$ 26,800
  4. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 7,730,000
  5. Incident date
    Target

    Dominion

    Attack methodPrivate Key Leakage
    Reported loss$ 238,000