Cryptocurrency [loss] $7M+

Tweet thread by CertiKAlert

2023-04-15 [vendor] Hundred Finance [chain] ethereum
Primary Source ↗
Financial Loss $7.4M (7,400,000 USD)
Blockchain(s) Ethereum

Incident Details

An attacker was able to manipulate the exchange rate between tokens and their interest-bearing equivalents on the Hundred Finance system on the Optimism layer-2 network, ultimately siphoning around $7.4 million from the project.Hundred Finance announced that they were trying to communicate with the attacker to try to convince them to return some of the funds.This was not the first exploit to impact Hundred Finance: in March 2022, both Hundred Finance and Agave Finance were targeted with a flash loan attack by a hacker who stole a total of $12 million from the two projects.

Total loss estimated at $7,400,000.

Technical Details

Initial Attack Vector
Flash loan attack on smart contract
Vendor / Product
Hundred Finance

Timeline

  1. 2023-04-15 Breach occurred
  2. 2023-04-15 Publicly disclosed