Digital Asset
Intelligence
Security Incident · Exchange

KiloEx Contract Vulnerability: $8.44M Reported Loss

·Historical incident record

Incident Overview

The decentralized perpetual futures exchange KiloEx was attacked, involving assets across multiple chains including BNB and Base. According to an analysis by the SlowMist Security Team, the root cause of the incident was the lack of access control checks in KiloEx's top-level contract (MinimalForwarder), which allowed the manipulation of oracle prices. Thanks to the active response from the project team and collaboration with SlowMist and others, all stolen assets were successfully recovered after 3.5 days of effort.

Sources & References

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Berally

    Attack methodPrivate Key Leakage
    Reported loss$ 86,725
  2. Incident date
    Target

    Cetus

    Attack methodContract Vulnerability
    Reported loss$ 230,000,000
  3. Incident date
    Target

    1inch

    Attack methodContract Vulnerability
    Reported loss$ 5,000,000
  4. Incident date
    Target

    R0AR

    Attack methodInsider Manipulation
    Reported loss$ 780,000
  5. Incident date
    Target

    Aergo

    Attack methodDDoS Attack
    Reported lossNot disclosed