Digital Asset
Intelligence
Security Incident

Set Protocol Smart Contract Vulnerability: $13.70K Reported Loss

·Source-attributed incident record

Incident Overview

The attacker abused Set Protocol’s actualizeFee(). Even though no fee was minted, the function rounded unitShares upward from 4,927 to 4,928. The attacker issued shares before the update and redeemed the same quantity afterward, extracting extra collateral from the rounding-induced unit increase. Uniswap v4 flash accounting supplied temporary liquidity to scale the exploit.

Sources & References

Original incident referencehttps://x.com/SlowMist_Team/status/2107382337654951943 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 9,600
  2. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 538000
  3. Incident date
    Attack methodUnauthorized Access to Internal Systems
    Reported loss0
  4. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 10,000
  5. Incident date
    Target

    $TENDRIL

    Attack methodSmart Contract Vulnerability
    Reported loss$ 555000