Digital Asset
Intelligence
Security Incident

Tinyman Pools Contract Vulnerability: $2.00M Reported Loss

·Historical incident record

Incident Overview

An attack occurred at Tinyman Pools on January 1 /2, algorand-based automated market maker (AMM) Tinyman tweeted. The attack exploits a previously unknown hole in the contract and allows the attacker to extract assets from a pool to which he has no access. So far, attacks have been executed on multiple pools, but not all of them have been attacked.

Sources & References

Original incident referencehttps://tinymanorg.medium.com/technical-report-1-first-insights-cbc12109ef08 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Solana

    Attack methodDDoS Attack
    Reported lossNot disclosed
  2. Incident date
    Attack methodOracle Attack
    Reported loss$ 1,000,000
  3. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 10,000
  4. Incident date
    Target

    $TENDRIL

    Attack methodSmart Contract Vulnerability
    Reported loss$ 555000
  5. Incident date
    Attack methodUnknown
    Reported lossNot disclosed