Digital Asset
Intelligence
Security Incident · EOS Ecosystem

flash.sx Reentrancy Attack: $11.74M Reported Loss

·Historical incident record

Incident Overview

According to previous news, starting from 11:28 UTC on May 14th, the flash.sx flash loan smart contract suffered a reentry attack vulnerability, and approximately 1.2 million EOS and 462,000 USDT were stolen. According to official sources, after EOS Nation's Lightning Loan was hacked, the project party initiated a proposal to directly change the hacker's EOS account permissions and return the assets. It is reported that the proposal initiated by the project party changed the hacker address authority to BP, which will be executed after approval.

Sources & References

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Defibox

    Attack methodCompatibility Issue
    Reported loss4,863 EOS
  2. Incident date
    Target

    Coral

    Attack methodReentrancy Attack
    Reported loss120,000 EOS
  3. Incident date
    Target

    EMD

    Attack methodRug Pull
    Reported loss$ 2,468,838
  4. Incident date
    Target

    Sony Life

    Attack methodInsider Manipulation
    Reported lossNot disclosed
  5. Incident date
    Target

    xToken

    Attack methodOracle Attack
    Reported loss$ 25,000,000