Digital Asset
Intelligence
Security Incident · ETH Ecosystem

Visor Finance Contract Vulnerability

·Historical incident record

Incident Overview

Uniswap V3 liquidity management protocol Visor Finance was hacked again. Hackers took advantage of the loopholes to withdraw more than 8.8 million VISRs and sold them on Uniswap, causing the VISR tokens to plummet by nearly 95% and profit over 120 ETH through Tornado Cash. Money laundering. According to SlowMist analysis, this attack is due to a flaw in the RewardsHypervisor contract when checking the permissions of the user's recharge, causing the attacker to construct a malicious contract to arbitrarily cast mortgage credentials. Prior to this June, Visor Finance was also hacked and lost more than US$500,000.

Sources & References

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodFlash Loan Attack
    Reported loss$ 975,720
  2. Incident date
    Attack methodPermission Stolen
    Reported loss$ 504,845
  3. Incident date
    Attack methodContract Vulnerability
    Reported lossNot disclosed
  4. Incident date
    Target

    MetaDAO

    Attack methodRug Pull
    Reported loss800 ETH
  5. Incident date
    Attack methodAccount Compromise
    Reported loss$ 1,300,000