Security Incident · ETH Ecosystem
DFXFinance Reentrancy Attack: $231.14K Reported Loss
The DFX Finance project on the ETH chain was attacked, and the attackers made a profit of about $231,138.
- Reported loss
- $ 231,138
- Attack category
- Reentrancy Attack
Incident Overview
According to SlowMist analysis, the main reason for this attack is that the Curve contract flash loan function does not have re-entrancy protection, which causes the attack to re-enter the deposit function to transfer tokens to judge the balance of flash loan repayments. The account so that the attacker can successfully withdraw money to profit.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.