Earning.Farm Reentrancy Attack: $530.00K Reported Loss
The DeFi project Earning.Farm suffered a reentrancy attack and lost 286 ETH (approximately $530,000).
- Reported loss
- $ 530,000
- Attack category
- Reentrancy Attack
Incident Overview
According to the analysis of SlowMist, the attacker re-enters the transfer function of LP to transfer LP tokens when withdrawing money, making the balance of the account smaller than the previously calculated shares value, triggering the logic of updating the shares value, resulting in the number of manipulated LPs being updated to the desired value. In terms of the value of the burned shares, this resulted in the final amount of LP burned being much smaller than expected, and the user can withdraw the funds in the pool by withdrawing the transferred LP again.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.