Digital Asset
Intelligence
Security Incident · ETH Ecosystem

Velocore Contract Vulnerability: $6.80M Reported Loss

·Historical incident record

Incident Overview

DEX Velocore experienced a security breach on June 2nd, 2024, resulting in financial losses approximating $6.8 million in ETH. The primary cause of the incident was faulty logic within the velocore__execute() function of the ConstantProductPool. When a user makes a swap on Velocore, the Vault contract makes an external call to this function to calculate the result of the swap.

Sources & References

Original incident referencehttps://velocorexyz.medium.com/velocore-incident-post-mortem-6197020ec3e9 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Loopring

    Attack methodSecurity Vulnerability
    Reported loss$ 5,000,000
  2. Incident date
    Target

    Lykke

    Attack methodUnknown
    Reported loss$ 22,400,000
  3. Incident date
    Attack methodContract Vulnerability
    Reported loss$ 1,500,000
  4. Incident date
    Target

    NCD

    Attack methodContract Vulnerability
    Reported loss$ 20,000
  5. Incident date
    Attack methodMalware Attack
    Reported loss$ 305,000,000