Eminence Hack

TOTAL LOST $15.1M
High Flash Loan Attacks ethereum

What happened

Eminence was an experimental Ethereum gaming-economy deployment built around EMN and linked bonding-curve currencies. An attacker used a 15M DAI Uniswap flash loan to exploit the interaction between the DAI-to-EMN curve and secondary currencies that burned EMN. The cycle drained the DAI reserve; reporting and a subsequent on-chain transaction document about 8M DAI returned to a Yearn deployer address.

Technical Root Cause

Two connected bonding curves treated EMN as both a reserve-side asset and a burnable input for another currency. The system did not safely account for the effect of secondary-currency EMN burns on the DAI-to-EMN redemption curve. Atomic flash liquidity made the economic imbalance scalable in one transaction; no external price oracle was required.

Case & protocol details

Classification Ecosystem / Gaming / Metaverse / Gaming / Metaverse / Gaming / Metaverse / Gaming / Metaverse / Gaming / Metaverse / Gaming / Metaverse / Gaming / Metaverse / Gaming / Metaverse / Gaming / Metaverse / Gaming / Metaverse / Gaming / Metaverse / Gaming / Met
Protocol Type Exploit/Flash Loan Attack
Affected asset / contract EMN
Smart Contract Language Solidity

Attack Timeline

The attacker flash-borrowed DAI and minted EMN. They used part of the EMN to buy a secondary Eminence currency, a path that burned EMN. Because EMN supply fed into the base bonding curve that paid DAI on redemption, reducing supply changed the return for the attacker’s remaining EMN.

The attacker sold the remaining EMN back to the DAI reserve, repeated the cycle, and repaid the flash loan.

Funds Recovery

52.9%

Recovered

$8.0M

Net Loss

$7,118,223

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.