Digital Asset
Intelligence
Security Incident · ETH Ecosystem

Soda Security Incident

·Historical incident record

Incident Overview

The financial blogger "Super Bitcoin" stated on Weibo that Mr. Huai (weibo username "crash X") participated in the liquidity mining project Soda, and suddenly discovered a loophole in which 20,000 ETH can be directly liquidated Drop. But he chose to tell the development team, but the development team did not pay attention. He had no choice but to liquidate an ETH, and sent a Weibo warning to inform the developers of the existence of this bug. One hour later, the parties to the Soda agreement responded by prompting the borrower to repay and the mortgager to withdraw, and at the same time indicated that they would fix the loopholes and suspend the front-end borrowing function. But as of the early morning of September 21st, more than 400 ETH in Soda's mortgage loan pool were still maliciously liquidated. In the morning of the same day, the agreement officially stated on Twitter that the vulnerability has been fixed, and the newly deployed smart contract is expected to take effect at 21:00 on September 22.

Sources & References

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodRug Pull
    Reported loss$ 4,000,000
  2. Incident date
    Target

    KuCoin

    Attack methodWallet Stolen
    Reported loss$ 150,000,000
  3. Incident date
    Target

    bZx

    Attack methodReplay Attack
    Reported lossNot disclosed
  4. Incident date
    Target

    SYFI

    Attack methodUnknown
    Reported loss747 ETH
  5. Incident date
    Attack methodRug Pull
    Reported loss3,000 BNB