VERDICT —UNRATED
Verdict pending. Auto-ingested incidents are reviewed before a public verdict is rendered.
Root cause
Root-cause analysis not yet published. The incident description below contains all currently available signal — review the attack transaction directly for definitive forensics.
▰ PROOF OF CONCEPT
DEFIHACKLABS
src/test/2020-10/HarvestFinance_exp.sol
view forked test on github ↗Reproducible Foundry test fork from SunWeb3Sec/DeFiHackLabs. Clone the repo, run forge test against the file path above, and replay the exploit against a mainnet fork at the historical block. Use for reproduction only — not for live targets.
Forensic narrative
Classification: Ecosystem. Technique: Flashloan Price Oracle Attack. Target type: DeFi Protocol. Affected chains: Ethereum. Implementation language: Solidity.
Sourced from
DefiLlama Hacks dataset · api.llama.fi/hacks
Technical record
- chain
- ethereum
- protocol
- Harvest Finance
- bug_class
- oracle
- date_occurred
- 2020-10-26
- loss_usd
- $25,000,000
- classification
- Ecosystem
- technique
- Flashloan Price Oracle Attack
- target_type
- DeFi Protocol
- language
- Solidity
- source_id
- dl:112
Related — same bug class· oracle