Digital Asset
Intelligence
Security Incident · ETH Ecosystem

Punk Protocol Contract Vulnerability: $3.95M Reported Loss

·Historical incident record

Incident Overview

Punk Protocol, the decentralized annuity protocol, stated that it encountered an attack during the fair launch process, causing a loss of 8.9 million US dollars. Later, the team recovered another 4.95 million US dollars and transferred it to a secure wallet. The Punk Protocol team stated that the attacker found a critical loophole in the investment strategy and extracted more than 8.9 million U.S. dollars of three stable currency assets (USDC, USDT, DAI) from the Forge-CompoundModel module, but a white hat hacker noticed The attacker's intent was reached, so a transaction was executed, which was able to recover $4.95 million. The lost funds have been transferred to the Ethereum currency mixing platform Tornado.cash, so it is difficult to keep track of them.

Sources & References

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Stazie

    Attack methodPhishing attack
    Reported loss$ 1,000,000
  2. Incident date
    Target

    Bilaxy

    Attack methodWallet Stolen
    Reported loss$ 21,709,378
  3. Incident date
    Target

    THORChain

    Attack methodPhishing attack
    Reported loss$ 76,000
  4. Incident date
    Target

    DAO Maker

    Attack methodPrivate Key Leaked
    Reported loss$ 7,000,000
  5. Incident date
    Attack methodPermission Stolen
    Reported loss$ 613,062,100.7