Security Incident
Starstream Finance & Agora Contract Vulnerability: $4.00M Reported Loss
Starstream Finance and Agora DeFi projects under attack.
- Reported loss
- $ 4,000,000
- Attack category
- Contract Vulnerability
Incident Overview
Attackers exploited a vulnerability in Starstream to siphon tokens from the protocol, then used the tokens as collateral to obtain large loans from Agora. The Starstream hack was achieved through an unprotected execute function in its DistributorTreasury contract, which is marked as an external function and can be used to call external functions. In total, the attackers borrowed about $8.2 million worth of tokens from Agora.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.