Security Incident · ETH Ecosystem
Notional Finance Smart Contract Vulnerability: $1.73M Reported Loss
Notional Finance’s legacy V1 Escrow contract was exploited.
- Reported loss
- $ 1,730,000
- Attack category
- Smart Contract Vulnerability
Incident Overview
The attacker abused an unsafe uint128 cast in free-collateral valuation so that a fabricated liability of about 2^128 truncated to zero, bypassing solvency checks, minting fake fCash claims, and withdrawing about 69,257.37 DAI and 1,658,524.86 USDC (~$1.73M). The funds were swapped into roughly 689.2 ETH and deposited into Tornado Cash. The team paused the affected contract, said other user assets were not at risk, and is pursuing recovery.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.