Eleven Finance Hack

TOTAL LOST $4.5M
Medium Flash Loan Attacks bsc

What happened

The attacker's address:

https://bscscan.com/address/0xc71e2f58…f11ed6

The transaction behind the attack:

https://bscscan.com/tx/0x6450d8f4…906789

The attacker:

- borrowed a flash loan from PancakeSwap with 953,869.62 BUSD, which is returned at the last step with the necessary fee to cover the flash loan cost

- swapped 340,631.23 BUSD for 474,378.75 NRV via PancakeRouter

- added liquidity with 474,378.75 NRV and 366,962.02 USDT into NRV+BUSDT pool via PancakeRouter and minted in return 411,515.29 Pancake LP tokens

- deposited 411,515.29 Pancake LP tokens into Eleven Finance via ElevenNeverSellVault and obtained 411,515.29 11 nrvBUSD LP tokens

- called emergencyburn() to withdraw 411,515.29 Pancake LP tokens without burning any 11 nvrBUSD LP token. Then called withdrawAll() to get extra 411,515.29 Pancake LP tokens with the related 11 nvrBUSD LP tokens burned.

Case & protocol details

Classification Ecosystem / Yield Aggregator / Protocol Logic
Protocol Type Exploit/Other
Affected asset / contract ELE
Smart Contract Language Solidity
Official Website eleven.finance/
Protocol Twitter/X @ElevenFinance

Funds Recovery

93.3%

Recovered

$4.2M

Net Loss

$301,500

Evidence & learning

Attack pattern

Compare incidents →
Flash Loan Attacks

Proof of concept

1 available

Sources and on-chain records

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes