VERDICT —UNRATED
Verdict pending. Auto-ingested incidents are reviewed before a public verdict is rendered.
Root cause
Root-cause analysis not yet published. The incident description below contains all currently available signal — review the attack transaction directly for definitive forensics.
Forensic narrative
Ola Finance on the Fuse chain published a blog post on the hacking incident, stating that the attack lost approximately $4.67 million, including 216,964.18 USDC, 507,216.68 BUSD, 200,000 fUSD, 550.45 WETH, 26.25 WBTC, and 1,240,000.00 FUSE. The attack uses a reentrancy vulnerability in the ERC677 token standard. Attack method (per SlowMist): Reentrancy Attack. Reported loss: $ 4,670,000.
Primary source
https://ola-finance.medium.com/ola-and-voltage-lending-exploit-on-fuse-post-mortem-214c13d88443 ↗Sourced from
slowmist
Technical record
- chain
- —
- protocol
- Ola Finance
- bug_class
- reentrancy
- date_occurred
- 2022-03-31
- loss_usd
- $4,670,000
- source_id
- sm:ola-finance::2022-03-31
Related — same bug class· reentrancy