What happened
On October 1, 2024, Fire Token was exploited through transfer logic that burned tokens sent to its Uniswap pair and then synchronized the pair's reserves. The attacker repeated the reserve manipulation and extracted about 8.45 ETH, valued at roughly $20,000 at the time of analysis.
How it happened
- The attacker exchanged 20 ETH for FIRE.
- The attacker transferred FIRE to the Uniswap pair, causing transfer logic to burn part of the token balance and synchronize lower FIRE reserves.
- The attacker swapped against the resulting reserve discrepancy.
- Repeating the cycle reduced reserves and yielded about 8.45 ETH.
Protocol details
Classification
Token / Oracle Manipulation
Protocol Type
Exploit/Other
Affected asset / contract
FIRE
Implementation language
Solidity
Protocol links
Website
@Fire_TokenEth
Evidence
- report Report blog.solidityscan.com
- analysis DeFiLlama defillama.com
- analysis Fire Token incident analysis blog.verichains.io
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
