Security Incident · Exchange
KiloEx Contract Vulnerability: $8.44M Reported Loss
The decentralized perpetual futures exchange KiloEx was attacked, involving assets across multiple chains including BNB and Base.
- Reported loss
- $ 8,440,000
- Attack category
- Contract Vulnerability
Incident Overview
According to an analysis by the SlowMist Security Team, the root cause of the incident was the lack of access control checks in KiloEx's top-level contract (MinimalForwarder), which allowed the manipulation of oracle prices. Thanks to the active response from the project team and collaboration with SlowMist and others, all stolen assets were successfully recovered after 3.5 days of effort.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.