Security Incident · ETH Ecosystem
Startale Smart Contract Vulnerability: $2.88K Reported Loss
Startale’s ERC-7579 smart accounts on Ethereum were exploited.
- Reported loss
- $ 2,876
- Attack category
- Smart Contract Vulnerability
Incident Overview
The attacker abused a transient-storage initialization flag in initializeAccount that persists for the entire transaction, allowing re-initialization with a malicious bootstrap in the same tx after factory deployment. This enabled draining ~330 pre-funded counterfactual accounts (no signatures or capital required) for a total of ~$2,876. The Soneium network itself was unaffected.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.