Cryptocurrency [loss] $501,000

"Clober Dex Incident Analysis"

2024-12-11 [vendor] Clober DEX [chain] ethereum
Primary Source ↗
Financial Loss $501,000 (501,000 USD)
Blockchain(s) Ethereum

Incident Details

Clober, a DEX built on Coinbase’s Base Ethereum layer-2, suffered an exploit only about a week after its launch. A re-entrancy bug in the project allowed an attacker to siphon 133.7 ETH (~$501,000) from the project. Although the project boasted of audits, Clober had made changes to a contract after the audits that introduced the vulnerability.Clober has offered a 20% “bug bounty” to the exploiter vi on-chain message, though they have not yet received any public reply.

Total loss estimated at $501,000.

Technical Details

Initial Attack Vector
Smart contract exploit / hack
Vendor / Product
Clober DEX

Timeline

  1. 2024-12-11 Breach occurred
  2. 2024-12-11 Publicly disclosed