Yearn Finance yETH Pool Drained Exploiting Stale Storage Cache
Unvalidated state transitions in the yETH pool's custom stableswap logic allowed an attacker to mint infinite tokens, resulting in a $9M capital drain.
Balancer V2 Pool Drained Exploiting Precision Rounding Logic Flaw
The Balancer V2 Vault's precision loss vulnerability was weaponized via `batchSwap`, enabling an attacker to drain $128M from Composable Stable Pools.
Cross-Chain Bridge Flaw Enables Massive Token Minting and Asset Drain
A sophisticated cross-chain bridge manipulation allowed a threat actor to mint and dump billions of fake tokens, causing an 87% token price crash.
Bex Protocol Drained $12.4 Million by Inherited Smart Contract Logic Flaw
An architectural vulnerability in the V2 vault logic of a forked protocol allowed for unauthorized, multi-chain asset extraction.
Balancer V2 Stable Pools Drained Exploiting Precision Rounding Flaw
Precision rounding errors in core swap logic created an economic invariant manipulation, exposing multi-chain liquidity to systemic theft.
Moonwell Lending Protocol Drained by Chainlink Oracle Price Manipulation on Base
A transient oracle malfunction on the Base L2 allowed collateral mispricing, exposing a critical systemic risk in the protocol's asset valuation logic.
Balancer V2 Pools Drained Exploiting BatchSwap Rounding and Access Control Flaw
A complex logic flaw leveraging batch swaps and a rounding error allowed attackers to bypass internal access controls, resulting in a $116M liquidity drain.
Balancer V2 Stable Pools Drained Exploiting Smart Contract Access Control Flaw
A critical logic flaw in the Composable Stable Pool's internal balance management allowed unauthorized withdrawal of $128M across seven distinct chains.
