VERDICT —UNRATED
Verdict pending. Auto-ingested incidents are reviewed before a public verdict is rendered.
Root cause
Root-cause analysis not yet published. The incident description below contains all currently available signal — review the attack transaction directly for definitive forensics.
Forensic narrative
EvoDefi, the project revenue farm on the BSC chain, was attacked, and the price of its token GEN dropped from US$2.1/piece to US$0.9/piece, a short-term drop of 57%. Loss of 455,576.85 GEN worth approximately USD 1 million. Due to the design flaws in the update logic of the function in the MasterChef contract, the part of the reward that needs to be deducted is not updated, which leads to arbitrage by the attacker. Attack method (per SlowMist): Flash loan attack. Reported loss: $ 1,000,000.
Primary source
https://medium.com/@Knownsec_Blockchain_Lab/knownsec-blockchain-lab-evodefi-attack-event-analysis-e1cba8a789ce ↗Sourced from
slowmist
Technical record
- chain
- bsc
- protocol
- EvoDefi
- bug_class
- flashloan
- date_occurred
- 2021-06-10
- loss_usd
- $1,000,000
- source_id
- sm:evodefi::2021-06-10
Related — same bug class· flashloan