Security Incident · Optimism Ecosystem
Polynomial Protocol Contract Vulnerability
Polynomial Protocol has a loophole in optimism's deposit contract.
- Attack category
- Contract Vulnerability
Incident Overview
The problem stems from the swapAndDeposit() function, which has no restrictions on its input. Anyone can pass in an address and maliciously construct swapData to steal contract-approved tokens.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.