Digital Asset
Intelligence
Security Incident · ETH Ecosystem

MEV Bot Flash Loan Attack: $2.15M Reported Loss

·Historical incident record

Incident Overview

The MEV Bot (0x05f016765c6c601fd05a10dba1abe21a04f924a5) was exploited and lost about 1k ETH! The core reason is that the 0xf6ebebbb function used to trigger arbitrage in the contract lacks authentication. The attacker calls this function to exchange the tokens in the contract into the pool on curve, and then uses funds of the flash loan to reverse exchange and obtain profit.

Sources & References

Original incident referencehttps://twitter.com/SlowMist_Team/status/1722081647028478029 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    MEV Bot

    Attack methodSandwich Attack
    Reported loss$ 1,400,000
  2. Incident date
    Target

    MEV Bot

    Attack methodLack of Strict Access Control
    Reported loss$ 210,000
  3. Incident date
    Target

    MEV Bot

    Attack methodContract Vulnerability
    Reported loss$ 2,000,000
  4. Incident date
    Attack methodUnknown
    Reported loss$ 12,000
  5. Incident date
    Attack methodLiquidity Exploit
    Reported loss$ 290,000