Cryptocurrency [loss] $2M+

"Multi-Strategy Vault Post-Mortem"

2022-08-01 [vendor] Reaper Farm [chain] fantom
Primary Source ↗
Financial Loss $1.7M (1,698,423 USD)
Blockchain(s) Fantom

Incident Details

Yield farming project Reaper Farm suffered an exploit that resulted in a $1.7 million loss. The attackers discovered a vulnerability that allowed them to withdraw anyone else’s funds. They then bridged funds to Ethereum, then laundered them through Tornado Cash. After discovering the exploit, Reaper Farms used the same vulnerability to remove funds from the remaining vulnerable vaults to prevent the attacker from stealing more.Shortly after the exploit, Reaper Farms announced they plained to raise capital via “the sale of vested $OATH tokens from our treasury with desirable terms”, which would then be used alongside other assets in their treasury to compensate users.

Total loss estimated at $1,698,423.

Technical Details

Initial Attack Vector
Smart contract exploit / hack
Vendor / Product
Reaper Farm

Timeline

  1. 2022-08-01 Breach occurred
  2. 2022-08-01 Publicly disclosed