Digital Asset
Intelligence
Security Incident · Exchange

treasure swap K-value Verification Vulnerability

·Historical incident record

Incident Overview

The treasure swap project was attacked. The attacker only used 0.000000000000000001 WETH to exchange all the WETH tokens in the transaction pool. The reverse of the source code found that the swap function of the attacked contract lacked the K value check. At present, the attacker has completed the attack on the two contracts 0xe26e436084348edc0d5c7244903dd2cd2c560f88 and 0x96f6eb307dcb0225474adf7ed3af58d079a65ec9, and accumulated a profit of 3,945 BNB.

Sources & References

Original incident referencehttps://www.panewslab.com/zh/sqarticledetails/91mr6yag.html (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Osmosis

    Attack methodLP vulnerability
    Reported loss$ 3,000,000
  2. Incident date
    Target

    Osmosis

    Attack methodFunds Pool Vulnerability
    Reported loss$ 5,000,000
  3. Incident date
    Target

    Elrond

    Attack methodVirtual Machine Vulnerability
    Reported loss$ 113,000,000
  4. Incident date
    Target

    SHELL

    Attack methodRug Pull
    Reported loss$ 180,000
  5. Incident date
    Target

    Optimism

    Attack methodMulti-signature address transfer vulnerability
    Reported loss2,000,000 OP