What happened
The exploiter's address:
The exploiter:
- Deployed contract to trigger the exploit
- Minted XFTM by input only FSM token without entering any FTM
- Collected XFTM token
- Sold XFTM token to FTM
- Bought more FSM and repeated the first step to get a larger amount of FTM
- Sold all his FTM for ETH and bridged these ETH to Ethereum via Celer Bridge
- Deposited stolen funds into Tornado Cash mixer:
That contract exploited the error in Fantasm’s Pool contract where the developer missed the condition checking for the minimum amount of input FTM when minting XFTM.
Protocol details
Classification
Protocol Logic / Other / Input Validation
Protocol Type
Exploit/Other
Affected asset / contract
XFTM
Implementation language
Solidity
Protocol links
Website
@fantasm_finance
Evidence
Proof of concept
1 availableSources
- report Twitter/X Alert twitter.com
- report Post-mortem medium.com
- report Report quadrigainitiative.com
- report Post-mortem medium.com
- report @PeckShieldAlert incident report twitter.com
- analysis Website reference certik.com
- analysis DeFiLlama defillama.com
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
