Digital Asset
Intelligence
Security Incident

Set Protocol Smart Contract Vulnerability: $9.60K Reported Loss

·Historical incident record

Incident Overview

The DeFi protocol Set Protocol (involving Index Coop’s ExchangeIssuance contract) was exploited due to insufficient state locking in the smart contract. The attacker used a malicious manager pre-issue hook to artificially inflate asset valuations (e.g., positionMultiplier), causing the contract to transfer excess assets based on falsified data, resulting in a loss of approximately $9,600.

Sources & References

Original incident referencehttps://x.com/SlowMist_Team/status/2082767887245410320 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 13,700
  2. Incident date
    Target

    Coldcard

    Attack methodFirmware Vulnerability
    Reported loss$ 100000000
  3. Incident date
    Attack methodPrivate Key Leakage
    Reported loss$ 625,000
  4. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 10,000
  5. Incident date
    Target

    $TENDRIL

    Attack methodSmart Contract Vulnerability
    Reported loss$ 555000