VERDICT —UNRATED
Verdict pending. Auto-ingested incidents are reviewed before a public verdict is rendered.
Root cause
Root-cause analysis not yet published. The incident description below contains all currently available signal — review the attack transaction directly for definitive forensics.
▰ PROOF OF CONCEPT
DEFIHACKLABS
src/test/2021-06/Eleven_exp.sol
view forked test on github ↗Reproducible Foundry test fork from SunWeb3Sec/DeFiHackLabs. Clone the repo, run forge test against the file path above, and replay the exploit against a mainnet fork at the historical block. Use for reproduction only — not for live targets.
Forensic narrative
Eleven Finance was exploited to drain a number of vaults at the loss of about $4.6 million. The incident was due to a bug that allows the attacker to withdraw funds without burning any shares. While it appears to be a flashloan attack, it is a flashswap-assisted one. Reported loss: $4,600,000.
Primary source
https://peckshield.medium.com/eleven-finance-incident-root-cause-analysis-123b5675fa76 ↗Sourced from
chainsec
Technical record
- chain
- —
- protocol
- Eleven Finance
- bug_class
- flashloan
- date_occurred
- 2021-06-22
- loss_usd
- $4,600,000
- source_id
- cs:eleven-finance::2021-06-22
Related — same bug class· flashloan