DeFi Hacks Reproduce - Foundry

Table of Contents

Getting Started

Web3 Cybersecurity Academy

OnChain transaction debugging

Donate us

List of Past DeFi Incidents

Transaction debugging tools

Ethereum Signature Database

Useful tools

Hacks Dashboard

List of DeFi Hacks & POCs

20261015 KolanHook - KolanHook settles its escrowed ETH buy-windows at the same Uniswap v4 pool's instantaneous spot price with no TWAP or bound and accept() is ungated once a window has expired, so the attacker flash-borrows 6.7 WETH from Balancer, swaps it to move the KLN spot, then calls accept() on two expired windows it does not own so _closeWindow() mispositions their escrowed ETH as single-sided liquidity around the manipulated price and runs an unbounded buyback, and reverses the swap back through that freshly placed ETH liquidity before repaying the loan for a 1.279453 ETH net gain

Lost: 1.279453 ETH net to the attacker EOA on Ethereum (surplus 1.279914429958618589 ETH after the 6.7 WETH Balancer flash loan is repaid, minus ~0.00046 ETH gas), draining KolanHook's full 2.309861 ETH of escrowed window funds

Contract

20261014 UNCXSmartTokenVesting - VestingManager pools every deposit of a given token in one contract and release() pays a slice of the full contract balance over a global share count, release() debits that global count but leaves the position's deposited shares in place and cancel() then debits the same shares a second time, so the attacker flash-borrows each token, creates self-owned vestings whose tranches are already elapsed and so instantly releasable, releases and cancels soft helper vestings to shrink the share denominator while donating token straight into the pool to raise the balance, then releases a payout vesting against the corrupted denominator and inflated balance to over-withdraw the other vesters backing tokens across five ERC-20s

Lost: ~88-89K USD across five ERC-20s on Ethereum, retained after the per-token flash loans are repaid and each reproduced to the wei against the tx transfer logs (EDGEN 55,601,598.708417972560603048, ZC 9,055,847.637887682268154756, pepecoin 40,155.284285661160205717, LO0P 65,372.217059159993437512, PAAL 113,657.766933968), the working capital flash-borrowed per token from Uniswap V3 (EDGEN), Uniswap V2 (pepecoin, PAAL) and Uniswap V4 (ZC, LO0P) and repaid in the same leg

Contract

20261009 BitBay - the UsdcDaiV4Vault _withdraw liquidity==0 branch pays the vault entire DAI and USDC balance to the caller with no share-weighted cap, and reposition() is permissionless once the tick is outside the narrow LP range, so the attacker deposits one wei for a single share, swaps the Uniswap v4 pool to push the tick onto tickUpper, calls reposition to recompute a position whose liquidity rounds to zero and leaves the pooled funds as raw balance, then redeems that one share to sweep the whole 14838 DAI pool

Lost: 14838.466608989135865711 DAI swept from the vault by a single 1-wei share on Polygon (reproduced to the wei against the on-chain Withdrawn amount), the attacker then unwound the drained DAI plus flash-loaned capital to a net ~14,813 USDC profit

Contract

20261008 X7Finance - X7Pioneer's claimRewards() adds the unaccounted ETH balance delta into totalRewards on every call but only refreshes lastETHBalance when claimable is non-zero, so calling it with an empty tokenIds array re-counts the same donated delta each time and inflates the per-token reward until a single owned NFT drains the whole pool, the ~26.96 ETH donation supplied by a flash loan and repaid from the drain

Lost: ~6.78 ETH to the attacker on Ethereum (attacker EOA balance rose 6.777538 ETH; this reconstruction nets 6.793749214542107991 ETH, the difference being the on-chain Aave flash-loan premium and gas, neither modeled); the single draining claimRewards([300]) pays 33.756919822234785023 ETH, matching the on-chain RewardsClaimed to the wei, with the ~26.96 ETH donation capital returned

Contract

20261006 SetProtocol - a second RebalancingSetTokenV3 vault (ETHMACOAPY) hit by the same permissionless actualizeFee() divCeil rounding, the attacker issues the rebalancing set then donates the residual base set into the vault own backing so the zero-fee recompute bumps unitShares from 12253 to 12264, then redeems the same quantity for more collateral than was deposited, the ~116,000 WETH issue/redeem size supplied fee-free by an Aave-v3-fork flash loan

Lost: 4.047988247781965824 WETH to the attacker in the first tx (reproduced to the wei) on Ethereum; two independent EOAs drained the ETHMACOAPY rebalancing set across two txs two blocks apart for ~8.11 WETH total, this PoC reconstructs the first tx (0xb54c77dae4c5ff8664779bacfb56d75242f39005b0b7778109d2f9033b9e8fc2) only, the ~116,000 WETH working capital borrowed and repaid in the same tx via a zero-premium Aave-v3-fork flash loan

Contract

20261006 SetProtocol - actualizeFee() is permissionless and recomputes unitShares with a divCeil even when it mints zero fee, rounding the backing collateral per share up by one with no fee actually taken, so issuing the rebalancing set before the bump and redeeming the same quantity after returns more collateral than was deposited, the ~25,044 ETH issue/redeem size supplied fee-free by a Uniswap v4 native-ETH flash-accounting loan

Lost: 5.083725683631735476 ETH to the attacker (reconstructed, 0.011% over the 5.083148662083682304 ETH taken on-chain) on Ethereum; the collateral backing Set Protocol's RebalancingSetTokenV3 was skimmed through the per-share rounding surplus, the ~25,044 ETH issue/redeem working capital borrowed and repaid in the same tx via Uniswap v4 zero-fee flash accounting

Contract

20261006 MakerDAOFlipKeeper - the dormant ETH-A flip-keeper proxy's drain selector has no ds-auth check, so anyone can call it to make the keeper vat.hope() a caller-supplied worker and then deal its four undealt 2020 ETH-A auctions and flux/exit the freed 200 WETH of collateral out

Lost: exactly 200 ETH (200.000000000000000000 WETH, 0xad78ebc5ac6200000 wei, reproduced with zero variance) to a fresh attacker on Ethereum; the dormant keeper proxy's unprotected drain settled its four undealt 2020 ETH-A liquidation auctions (#1457-1460, 50 WETH each) and swept the freed collateral out - not a MakerDAO core bug, the keeper impl's drain selector simply omits the ds-auth modifier that the contract's other functions carry

Contract

20261003 MALT - the MALT/DAI sLP runs its below-peg price recovery inside swap() before sending the output, pulling DAI from the Capital Source treasury into the pool, then checks its constant-product invariant against the final balances without separating the injected treasury DAI from the caller's own input, so a negligible 1 DAI swap is credited with thousands of injected DAI and releases a disproportionate MALT output

Lost: 13,440.581562307921517594 DAI net profit to the attacker (exactly reproduced) on Polygon; the Capital Source treasury was drained of 12,744.644506590589136718 DAI across two below-peg rebalance injections, the attacker paying just 1 DAI per exploit swap and arbitraging the extracted MALT out on QuickSwap - the ~$72K figure in the original alert does not match the on-chain reconstruction

Contract

20261002 GoldPesa - the GPX V4 hook rebalances protocol liquidity inside beforeSwap via a burn and TAKE_PAIR that run in the attacker's own open PoolManager unlock, and never checks the PositionManager deltas are settled first, so an unsettled mint debt parked in the same unlock nets against the hook's burn credit and the attacker walks the freed USDC out

Lost: 114,999.999186 USDC (exactly reproduced) on Base; the GPX/USDC V4 pool's protocol liquidity was burned by the hook's own hourly rebalance, and its 148,868.602188 USDC burn credit was split by the shared-unlock delta bug - 33,868.603002 USDC reached the hook while 114,999.999186 USDC paid off the attacker's unsettled mint debt and then exited to the attacker, funded by a 175,000 USDC Morpho flash loan repaid in the same tx

Contract

20261001 FlashLoopAdapter - a Safe module authenticates its caller by asking that caller whether the module is enabled (self-attestation) and then makes an unconstrained call to a caller-supplied router, letting a fake Safe drive the adapter into draining real Safes that enabled it

Lost: 114.096151 WETH (~$305k, exactly reproduced) on Ethereum; two Safes that enabled the module as a victim were emptied - Safe #1 lost 1306.48 weETH of Aave collateral once its 1335.26 WETH debt was repaid, Safe #2 lost 6.426 weETH, all swapped to WETH via ODOS for the attacker's net

Contract

20260930 SKYDAO - sell-path controller burns the pair's SKYDAO and syncs before the net sell is credited, latching a near-zero reserve that a direct pair.swap drains for the pair's entire USDT

Lost: 59,914.12 USDT net to the attacker (exactly reproduced) on BNB Chain; the SKYDAO/USDT PancakeSwap V2 pair lost its entire 183,482.88 USDT reserve, drained by a direct pair.swap against the reserve the sell-path burn+sync latched to ~0

Contract

20260930 PositionManager - deposit values the vault's existing USDT at the manipulable PancakeSwap V3 spot price, so crashing the spot before depositing mints inflated shares that withdraw redeems in the same transaction

Lost: 32,080.604282 USDT (exactly reproduced) on BNB Chain; one atomic tx crashed the USDT/BTCB spot with an 8,000,000 USDT swap, then ran 24 deposit(1,000,000 USDT)/withdraw cycles to drain the vault's own PancakeSwap V3 position, the pool losing 32,096.098596 USDT

Contract

20260930 MUS - deposit refunds a first-deposit bonus and also credits it as withdrawable allocation, so a single deposit-withdraw from a fresh address returns more ETH than deposited

Lost: ~0.400168 ETH per deposit-withdraw cycle (exactly reproduced) on Ethereum; the MUS pool's standing 5.335 ETH was drained to 0 across the attack block, reported campaign total ~$36.9k across many fresh addresses

Contract

20260929 LPBonus - reserve inconsistency between reward accrual and LP withdrawal lets a manipulated MSN reserve inflate an LP reward claim

Lost: 92,607 USDT ($92.6k) on BNB Chain; one LP position claimed 1,442,165.713011 FIST against an accrual that funded ~940,041.612768 FIST, extracted by flash-swapping the MSN reserve down at accrual and back up at withdrawal

Contract

20260926 DAOstack - permissionless newOrganization lets an attacker hijack an existing Reputation contract and drain the Avatar

Lost: 4.025 ETH (full Genesis Alpha treasury); attacker minted 20,000 REP against the victim's real Reputation contract (supply 9,738.6 to 29,738.6, ~67% majority after a 200 REP GenesisProtocol vote-cost burn) and used it to self-install as a full-permission scheme

Contract

20260923 PancakeV3SwapHelper - Signed Swap Delta Accounting Error

Lost: 1.6488688845 BNB ($1.3K)

Contract

Link reference

20260921 TheRedVillage - ungated PolygonTRVRouter forwardRequest relays an attacker-supplied upgradeTo through the router's _authorizeUpgrade role on the SeasonService UUPS proxy, installing a malicious implementation that uses the proxy's TRVZooKeeper roles to pull every player's approved WETH and sweep the vault

Lost: 31.426018474517367982 WETH (~$80.7K) swept from TRVZooKeeper on Polygon; 299 players with standing WETH approvals were pulled for 31.350379502001368 WETH and the vault's pre-existing 0.075638972516 WETH was swept with them, reproduced to the wei

Contract

20260921 DoinGud - acceptOffer replay via missing offer cleanup on the amount=0 path

Lost: 35,380.154566 USDC net (two byte-identical acceptOffer calls each paid out 35,486.935717 USDC from escrow; funded via a UniV2 flash swap, repaid 35,593.716868 USDC)

Contract

20260921 GaslessReservoirEnabler - erc20WithTransfersAndExecute lets a whitelisted module run unvalidated transferFrom calldata

Lost: 8.72 WETH ($23.8K) across 466 victims with standing approvals to the Enabler; PoC reproduces 3 victims, 2.3546 WETH ($6.4K, ~27% of the WETH-leg loss)

Contract

20260921 InternetToken - permissionless swapV3 with caller-supplied pool lets a fake callback mint INT arbitrarily

Lost: 764,145,702 INT + 5.846988 WETH (attacker minted 925.41M INT total, dumped 161.27M into the real INT/WETH pool for the WETH, reproduced to the wei)

Contract

20260918 Likwid - missing pairDelta update in leverage=0 margin borrow freezes AMM quote

Lost: 74.31 BNB (reproduced to within 3 wei)

Contract

20260916 Startale - transient storage init flag outlives the constructor and lets anyone reinitialize an ERC7579 account and drain it

Lost: 427.551160 USDC drained in this batch tx (32.555561 USDC reproduced across 3 of 23 victim accounts; ~$2,876 USDC+USDT aggregate across 41 known batches)

Contract

20260916 Flamincome - permissionless Convex stakeFor inflates Strategy NAV and lets VaultYUSDT overpay on withdrawAll

Lost: ~$345.9K USDT net attacker profit (gross Strategy loss ~$595K in aUSDT+USDT)

Contract

20260916 PrimeFinance - permissionless stale signed oracle report overwrite drains lending pool

Lost: 425.5 WHYPE ($33.4K) drained from the lending pool reserve

Contract

20260916 Nimiq - GSN forwarder skips signature check, relying solely on attacker-chosen paymaster

Lost: ~$50,463.79 (USDC, USDT0, USDC.e drained from a swap-liquidity wallet's standing approvals)

Contract

20260915 RsETHSafeModule - nested self-referential multicall authorization bypass drains Gnosis Safe via DELEGATECALL

Lost: 2,900 aEthrsETH (~$7.8M gross; 2,882.37 rsETH / ~$7.73M net to the MEV frontrunner)

Contract

20260915 BonfireSwap - missing caller authorization lets anyone force-sell any approved holder's tokens

Lost: 66 BNB ($47-50K); 58.78 BNB reproduced from a 5-victim subset (~98.7% of tokens drained)

Contract

20260912 SpiralHookV2 - Uniswap V4 spot-price borrow plus tx.origin-keyed same-block guard bypass

Lost: ~10.70728 ETH (reproduced exact to the wei)

Contract

20260912 YamFinance - dormant-DAO quorum governance takeover drains legacy UMA farming contracts

Lost: ~$121K (48.085 WETH + 763.101 UMA)

Contract

20260911 ORB - leveraged pool buyout + refund-before-sell reentrancy drains burnLP-depleted reserve

Lost: 44.9-45 BNB ($32,610.72)

Contract

20260911 GDC - chained EOA bypass, liquidity misclassification, burn mismatch, and reentrant tax-free exit

Lost: ~35.34 BNB (35.337151495976986490 BNB reproduced exact to the wei)

Contract

20260909 EtherFiAtomicQueue - missing solver access control drains victim allowances

Lost: ~15.45 ETH (9 real victims' standing liquidETH allowances drained)

Contract

20260909 OMNI404 - ERC-404 dual ID/amount transfer interpretation drains pool WETH

Lost: 2.427 WETH (run() leg reproduced here; ~3.02 ETH across the full 4-tx block)

Contract

20260909 UnifiProtocol - unregistered caller-supplied pool trusted for reward eligibility and math

Lost: ~5.86 BNB (treasury still holds ~9.17 BNB, contract unpaused — bug remains re-exploitable)

Contract

20260909 BeatXswap - slot0 spot-price oracle with no TWAP guard drains vesting BTX reserves

Lost: ~$63.7K USDT net profit (2,984,557 BTX / ~$77.5K drained from two vesting reserves)

Contract

20260909 EnsoFinance - short-window Uniswap V3 TWAP oracle enables ~9x overvalued strategy deposit

Lost: ~5.6 ETH (5.277 ETH realized in this PoC after slippage selling looted UNI/AAVE/MKR back to WETH)

Contract

20260909 ZentraFinance - aToken burn safeguard clamps to zero, repayWithATokens clears debt without burning

Lost: 140,000 ctUSD + 30 USDC.e ($143K)

Contract

20260908 OrderFactory - missing access control on createOrderForBuyer drains buyer accounts

Lost: ~20.247 ETH this tx (5 buyers drained; reported incident total ~24.7 ETH)

Contract

20260907 RouterDrain - permissionless swap entry lets a fake V3 pool abuse router allowances

Lost: ~62.28 WBNB across 29 victims (3 reconstructed here: OCEAN, Kandura, SATURN)

Contract

20260907 CozyFinance - unverified UMA Optimistic Oracle trigger enables unbacked protection-token redemption

Lost: 160,776 USDC.e ($160K)

Contract

20260905 DHC - repeatable claim due to missing claimed-flag

Lost: ~$71.8K USDT

Contract

20260905 Reddio - cross-share-class balance double-count via permissionless registerErc20

Lost: ~9.25 ETH

Contract

20260905 SecuredFi - same-block self-trade manipulates getMarketUnitPrice to fabricate collateral

Lost: 0.9 WBTC ($72K single-drain; ~$104K across all actors exploiting the same public bug)

Contract

20260903 NotionalFinance - ERC1155 fCash mint overflow drains escrow

Lost: ~69,257.37 DAI + 1,658,524.86 USDC ($1.73M)

Contract

20260901 ReflexerGEB - Shared GebProxyActions library registered as SAFE owner

Lost: 5.9436 ETH ($14K, drained from 4 SAFEs in one tx: IDs 3, 5, 8, 18)

Contract

20260831 FloatProtocol - Uniswap V3 spot price manipulation of Hypervisor LP shares

Lost: ~$28,000 (10.71 ETH)

Contract

20260831 BalancerV1BPool - joinswapPoolAmountOut rounding drain across 5 pools

Lost: $110,839 for this DPI/USDC/WETH/WBTC pool ($234K aggregate across all 5 vulnerable pools)

Contract

20260828 AjnaFinance - liquidation accounting manipulation via self-controlled auction

Lost: ~$124.8K for this cbETH pool (1 of 7 pools hit by the same bug the same day, ~$775K aggregate)

Contract

20260827 CashCowCoin - privileged burn + premature sync() drains PancakeSwap pair

Lost: 165.47 WBNB ($117.4K)

Contract

20260826 EnjinCryptoItems - unprotected registry reinitialization, manager takeover

Lost: 5,231,353 ENJ (~$142K)

Contract

20260825 FHToken - sell-tax reserve mismatch via premature sync()

Lost: 19,999.018106552928530404 USDT (~$20K)

Contract

20260823 ArrakisGUNI - Uniswap V3 spot-price manipulation of vault mint/burn

Lost: ~2.9414 ETH net attacker surplus (Arrakis V1 / G-UNI ENS-WETH vault)

Contract

20260823 TermFinance - Governance capture via thinly-wrapped Aragon voting power

Lost: 2,841.743535791961701401 WETH (attacker net gain, ETH meta-vault)

Contract

20260822 SandboxOFT - LayerZero delegate hijack via approveAndCall

Lost: 10,000,000 SAND minted unbacked (~$517,170 face value, one of 400+ repeated txs in an ongoing campaign)

Contract

20260819 AllbridgeCCTP - Phantom deposit via unverified message attestation

Lost: ~189,751.554381 USDC

Contract

20260809 USM - defund() price split-invariance rounding exploit

Lost: ~70.83 ETH

Contract

20260806 UnistreetLaunchpad - arbitrary call injection via unvalidated launch forwarding

Lost: ~17,743.91 USDC + 0.0072 WETH ($17.75K)

Contract

20260805 StrongBlock - governance takeover of an abandoned Governor

Lost: 32,695.761681 STRONG + 383,447.167299 STRNGR (~$72K)

Contract

20260803 AIC - pair skim / reserve-mismatch exploit, flash-swap leveraged

Lost: 32.36 BNB ($21.5K)

Contract

20260802 MOKE - settle() tx.origin check lets any EOA latch a manipulated MOKE/USDT price, then claim() mints inflated MOKE against it

Lost: ~1546.54 BNB (~41.68M MOKE over-minted)

Contract

20260716 CrowdRingCircle - sell-destroy path burns CRC out of the pair on any non-exempt sell, collapsing the reserve so a follow-up swap drains the pool's USDT

Lost: ~201.36K USDT

Contract

20260716 PerpetualProtocol - v2 (Curie) unguarded OrderBook funding-growth update lets anyone poison cached funding, draining the Vault

Lost: ~3,062.21 USDC

Contract

20260706 SummerFi - FleetCommander NAV Inflation via Depegged xUSD

Lost: ~$6M (DAI + LVUSDC shares)

Contract

Link reference

20260701 edel-xstock - Price Oracle Manipulation

Lost: 204,215.57 USDC

Contract

Link reference

20260629 Vault4626 - Business Logic Flaw

Lost: 13.53 WETH

Contract

Link reference

20260628 AIDC - Business Logic Flaw

Lost: 220.13 WBNB

Contract

Link reference

20260627 CookFinanceIssuance - Price Oracle Manipulation

Lost: ~$50K

Contract

Link reference

20260625 LixirPermitDrain - Broken Signature Verification

Lost: 2.60 ETH, 4,477.72 USDC, 3,609.95 USDT, 24,182.56 LIX

Contract

Link reference

20260625 OceanBPoolSideStaking - BPool single-sided join/exit math with SideStaking gulp accounting

Lost: 127.86K mOCEAN

Contract

Link reference

20260624 DLMC - Reserve-derived livePrice manipulation

Lost: 222,560.22 USDT

Contract

Link reference

20260623 RoyalRoyalties - Zero-amount ERC1155 batch transfer inflated Royal LDA tier balance

Lost: 261,162.93 USDC

Contract

Link reference

20260622 Aztec Escape Hatch - proof_id Accounting Bypass (whitehat reproduction)

Lost: N/A (purely educational; worst-case impact would have been ~$2M, matching the separate vulnerability that actually drained the contracts)

Contract

Link reference

20260622 ATM - LP Token Burn

Lost: 1,603.99 WBNB

Contract

Link reference

20260620 OLPC - OLPC pair reserve manipulation

Lost: 1,115,903.66 USDT

Contract

Link reference

20260618 JB - JB helper repeated cycle drains JB/USDT pair

Lost: 49,958.06 USDT

Contract

Link reference

20260617 Aztec V1 - escapeHatch Proof-Forgery (permissionless RollupProcessor exit)

Lost: ~$2.2M (1158 ETH + 150,000 DAI + 0.4696 renBTC)

Contract

20260617 WHALE - Transfer Accounting Reserve Desync

Lost: 3,460.41 USDT

Contract

Link reference

20260617 LBP - LBP balanceOf reward accounting

Lost: 610.56 BNB

Contract

Link reference

20260616 DIP - Fee-on-Transfer Reserve Manipulation

Lost: 111,097.59 USDC

Contract

Link reference

20260615 Thetanuts - Index vault component-share accounting flaw

Lost: 105471.50 USDC

Contract

Link reference

20260614 Aztec Connect - numRealTxs Proof/Settlement Mismatch (permissionless RollupProcessorV3)

Lost: ~$2.19M (this PoC reproduces the 908.99 ETH leg)

Contract

Link reference

20260609 TOPBPool - Governance-controlled token mint and Balancer pool drain

Lost: 944.20 WETH

Contract

Link reference

20260609 NovaBox - Constructor Dividend Checkpoint Bypass

Lost: 56.73 ETH

Contract

Link reference

20260607 AmbientCrocSwapDex - Native surplus accounting flaw

Lost: 67.85 ETH

Contract

Link reference

20260606 BOSS - BOSS helper mint/burn and transfer-tax pool skew

Lost: 10,207.54 USDT

Contract

Link reference

20260605 DTXT - Liquidity Misclassification Fee Bypass

Lost: 35,041.11 USDT

Contract

Link reference

20260605 AISOTHPresale - Fixed-price presale arbitrage

Lost: 30,314.76 USDT

Contract

Link reference

20260604 BYToken - Permissionless triggerAutoBurn Reserve Manipulation

Lost: ~$87,402 (146.60 WBNB)

Contract

Link reference

20260604 ATM Token - Hidden transferFrom Auto-Swap Drain

Lost: ~$243,543 USDT

Contract

Link reference

20260530 AROS - Signature Replay

Lost: ~$295K

Contract

Link reference

20260529 YSDAO - Price Manipulation and Tax Bypass

Lost: ~19.49K USDT

Contract

Link reference

20260528 LegendaryMoneyMonNft - ecrecover address(0) Signature Bypass

Lost: ~$85.5K USD (85,519 USDT)

Contract

Link reference

20260528 DxSale - Ownership Override Attack

Lost: ~7.3M USD

Contract

Link reference

20260527 Joe Agent - Reentrancy in removeLiquidityViaContract

Lost: ~$45K USD (62.5 BNB + ~1.196M JOE)