Yearn Finance StableSwap Pool Drained by Infinite Token Minting Flaw
Unchecked arithmetic in a custom yETH contract enabled a token supply inflation attack, leading to a $9 million liquidity drain.
Legacy Yearn Stableswap Pool Logic Flaw Enables Infinite Token Mint
A critical logic flaw in the legacy yETH stableswap pool allowed for arbitrary token minting, creating a $9 million systemic risk.
Balancer V2 Pools Drained by Precision Rounding Smart Contract Flaw
A systemic precision rounding error in the V2 Vault's `batchSwap` function allowed attackers to repeatedly drain liquidity via compounded, minute discrepancies.
DeFi Protocol Prisma Finance Drained via Malicious Flash Loan Input Validation Flaw
Inadequate input validation on the flash loan callback allowed an attacker to spoof migration data, directly compromising approved user collateral.
Concentrated Liquidity DEX Drained by Complex Precision-Based Reentrancy Flaw
A sophisticated reentrancy exploit weaponized the concentrated liquidity pool's tick logic, enabling an unauthorized, multi-chain asset drain exceeding $47 million.
Bitcoin DeFi Platform ALEX Protocol Drained by Smart Contract Access Control Flaw
Flawed vault access control allowed a malicious token to impersonate the protocol, bypassing validation logic to drain $8.3M in liquidity.
