Digital Asset
Intelligence
Security Incident

Harvest Keeper Insider Manipulation: $933.00K Reported Loss

·Historical incident record

Incident Overview

According to news, the Harvest_Keeper project maliciously transferred user funds, involving an amount of about 933,000 US dollars. Through the data on the chain, it was found that the attacker used the owner authority to transfer the USDT pledged by the user in the HarvestKeeper contract by calling the getAmount function, and then the attacker used the user's token authorization to the EOA account to transfer the user's funds through the EOA multiple times.

Sources & References

Original incident referencehttps://www.panewslab.com/zh/sqarticledetails/7urkn6lh.html (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodFlash Loan Attack
    Reported loss$ 9,925
  2. Incident date
    Attack methodMalicious software
    Reported loss$ 1,800,000
  3. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 10,000
  4. Incident date
    Target

    $TENDRIL

    Attack methodSmart Contract Vulnerability
    Reported loss$ 555000
  5. Incident date
    Attack methodUnknown
    Reported lossNot disclosed