Digital Asset
Intelligence
Security Incident · Optimism Ecosystem

Polynomial Protocol Contract Vulnerability

·Historical incident record

Incident Overview

Polynomial Protocol has a loophole in optimism's deposit contract. The problem stems from the swapAndDeposit() function, which has no restrictions on its input. Anyone can pass in an address and maliciously construct swapData to steal contract-approved tokens.

Sources & References

Original incident referencehttps://twitter.com/0xPoor4ever/status/1602156729105788929 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Layer2DAO

    Attack methodPermission Stolen
    Reported loss49,950,000 L2DAO
  2. Incident date
    Target

    BitBTC

    Attack methodContract Vulnerability
    Reported lossNot disclosed
  3. Incident date
    Target

    Velodrome

    Attack methodInternal evil
    Reported lossNot disclosed
  4. Incident date
    Attack methodContract Vulnerability
    Reported loss278 BNB
  5. Incident date
    Target

    3Commas

    Attack methodInformation Leakage
    Reported loss$20,000,000