Gelato Hack

TOTAL LOST —
Other

What happened

The transaction behind the exploit:

https://etherscan.io/tx/0x90a5d10c…46c303

The bug in GUniRouter02 within the rebalanceAndAddLiquidity() function was able to be exploited to transfer funds from users' wallets who have previously approved GUniRouter02 for spending their tokens.

Tokens, which were mostly affected: DAI, USDC, FEI, agEUR, FRAX, WETH, ENS, ETH2x-FLI, G-UNI DAI/USDC, and POP.

The root issue: rebalanceAndAddLiquidity() can be invoked with custom _swapAction and _swapDatas parameters. Given the fact that users have given infinite allowances for the router contract, the possible exploiter could drain users' funds from their wallets.

The project team executed a successful whitehat hack which secured around $26M of user funds.

Case & protocol details

Classification Exchange (DEX)
Protocol Type Exploit/Other
Official Website www.gelato.network/
Protocol Twitter/X @gelatonetwork

Evidence & learning

Sources and on-chain records

Browse all hacks

Other incidents recorded with the same attack technique.

Aquifer $2.5M
Term Labs $8.5M
Harmony $300K
Coreum $200K

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes