Digital Asset
Intelligence
Security Incident · Arbitrum Ecosystem

Lumi Finance Smart Contract Logic Vulnerability: $270.00K Reported Loss

·Historical incident record

Incident Overview

The DeFi protocol Lumi Finance on Arbitrum suffered an exploit where attackers leveraged Sodium smart accounts that performed token approvals as a side effect during UserOp validation. This allowed a malicious Paymaster to gain allowances from multiple accounts and drain funds, resulting in approximately $270,000 in losses.

Sources & References

Original incident referencehttps://x.com/SlowMist_Team/status/2076669154036527314 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Cascade

    Attack methodPrice Manipulation
    Reported loss$ 1,343,921
  2. Incident date
    Target

    Ostium

    Attack methodPrivate Key Leakage
    Reported loss$ 18,000,000
  3. Incident date
    Attack methodSignature Replay Attack
    Reported loss$ 29,984.27
  4. Incident date
    Attack methodSmart Contract Logic Vulnerability
    Reported loss$ 8,500
  5. Incident date
    Attack methodOracle Price Manipulation
    Reported loss$ 9,050,000