Digital Asset
Intelligence
Security Incident

Starstream Finance & Agora Contract Vulnerability: $4.00M Reported Loss

·Historical incident record

Incident Overview

Starstream Finance and Agora DeFi projects under attack. Attackers exploited a vulnerability in Starstream to siphon tokens from the protocol, then used the tokens as collateral to obtain large loans from Agora. The Starstream hack was achieved through an unprotected execute function in its DistributorTreasury contract, which is marked as an external function and can be used to call external functions. In total, the attackers borrowed about $8.2 million worth of tokens from Agora.

Sources & References

Original incident referencehttps://mobile.twitter.com/SlowMist_Team/status/1512482819326492676 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    UGC

    Attack methodAccount Compromise
    Reported lossNot disclosed
  2. Incident date
    Attack methodUnknown
    Reported loss$ 530,000,000
  3. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 10,000
  4. Incident date
    Target

    $TENDRIL

    Attack methodSmart Contract Vulnerability
    Reported loss$ 555000
  5. Incident date
    Attack methodUnknown
    Reported lossNot disclosed