Fantom Foundation Hack

Reported loss $7.4M
Fantom Ethereum
Suspected private-key compromise

What happened

On October 17, 2023, Fantom Foundation and employee wallets were drained. CertiK traced about 4,701 ETH consolidated, worth approximately $7.35 million at its report date. Fantom said $550,000 belonged to the Foundation and the remainder was an employee's personal funds.

MetaMask reported user funds were unaffected.

Technical root cause

Transaction patterns support compromised wallet control, with private-key compromise assessed as likely. Initial access was not established.

How it happened

  1. Unauthorized transfers and withdrawals affected Foundation-labeled and connected employee wallets on Fantom and Ethereum.
  2. Assets were bridged and consolidated into an Ethereum address.
  3. CertiK and MetaMask assessed private-key compromise as likely. The early Chrome zero-day theory remained unconfirmed.

Protocol details

Classification Other
Protocol Type Exploit/Access control
Affected asset / contract FTM
Protocol links Website @FantomFDN

Evidence

Understand the attack patterns

Compare incidents →
Access Control Attacks

Same attack technique

Browse all hacks →
GDAC $13.0M lost Multiple EXMO $11.7M lost Ethereum Cryptopia $16.0M lost

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes