Digital Asset
Intelligence
Security Incident · ETH Ecosystem

YOLO Games Contract Vulnerability: $1.50M Reported Loss

·Historical incident record

Incident Overview

$1.5 million was stolen from the liquidity pool on the Blast network’s gaming platform YOLO Games. The root cause was the lack of permission checks in the "exitPool" function, allowing anyone to impersonate liquidity providers and drain the pool. The attack was carried out by a white hat hacker, who returned 353 ETH (90% of the stolen funds), approximately $1.27 million.

Sources & References

Original incident referencehttps://x.com/shoucccc/status/1800353122159833195 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Loopring

    Attack methodSecurity Vulnerability
    Reported loss$ 5,000,000
  2. Incident date
    Target

    Lykke

    Attack methodUnknown
    Reported loss$ 22,400,000
  3. Incident date
    Target

    Velocore

    Attack methodContract Vulnerability
    Reported loss$ 6,800,000
  4. Incident date
    Attack methodAccount Compromise
    Reported lossNot disclosed
  5. Incident date
    Target

    UwU Lend

    Attack methodContract Vulnerability
    Reported loss$ 19,300,000