Digital Asset
Intelligence
Security Incident · ETH Ecosystem

Superfluid Contract Vulnerability: $13.00M Reported Loss

·Historical incident record

Incident Overview

The QI Vesting contract on the streaming digital asset protocol Superfluid has been exploited by an attacker by passing in incorrect call data. This vulnerability allows the attacker to transfer funds from Superfluid user wallets to Polygon and exchange them for ETH.

Sources & References

Original incident referencehttps://medium.com/superfluid-blog/08-02-22-exploit-post-mortem-15ff9c97cdd (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Meter.io

    Attack methodContract Vulnerability
    Reported loss$ 4,300,000
  2. Incident date
    Target

    RigoBlock

    Attack methodContract Vulnerability
    Reported loss160.86 ETH
  3. Incident date
    Target

    OpenSea

    Attack methodListing mechanism loopholes
    Reported loss347 ETH
  4. Incident date
    Attack methodRug Pull
    Reported loss$ 10,000,000
  5. Incident date
    Target

    PayBito

    Attack methodRansomware
    Reported lossNot disclosed