Digital Asset
Intelligence
Security Incident · Polygon Ecosystem

Royal.io Smart Contract Vulnerability: $263.00K Reported Loss

·Historical incident record

Incident Overview

A legacy royalties contract (Royal1155LD) associated with Royal.io on Polygon was exploited due to a logic flaw in reward/pro-rata royalty accounting. The attacker used a flash loan and 100 zero-value ERC1155 transfers to manipulate the beforeLdaTransfer function, inflating balances and withdrawing ~$263K USDC.

Sources & References

Original incident referencehttps://cryptorank.io/news/feed/c9d17-legacy-polygon-royalties-contract-exploit-drains-261k-through-reward-logic-flaw (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodPrivate Key Leakage
    Reported loss$ 573,200
  2. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 101,400
  3. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 140,000
  4. Incident date
    Target

    Yield Yak

    Attack methodFrontend Attack
    Reported lossNot disclosed
  5. Incident date
    Target

    SecondFi

    Attack methodPredictable Private Key Exploit
    Reported loss$ 2,400,000