Digital Asset
Intelligence
Security Incident

JokInTheBoxETH Contract Vulnerability: $34.00K Reported Loss

·Historical incident record

Incident Overview

MEV Bot JokInTheBoxETH was attacked, lost ~$34K. The root cause of the exploit was poorly implemented unstake function fo the staking contract. Since the unstake function does not check the state of the variable "unstake", the exploiter could unstake multiple times and drian the assets.

Sources & References

Original incident referencehttps://x.com/JokInTheBoxETH/status/1800539599082500106 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    UwU Lend

    Attack methodContract Vulnerability
    Reported loss$ 3,720,000
  2. Incident date
    Target

    UwU Lend

    Attack methodContract Vulnerability
    Reported loss$ 19,300,000
  3. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 10,000
  4. Incident date
    Target

    $TENDRIL

    Attack methodSmart Contract Vulnerability
    Reported loss$ 555000
  5. Incident date
    Attack methodUnknown
    Reported lossNot disclosed