GMBL.COMPUTER Hack

Reported loss $815K
Arbitrum
Referral Claims Logic Exploit

What happened

GMBL Computer, a DeFi Gambling Protocol on Arbitrum, suffered a referral system exploit, resulting in the loss of 768,196 $USD worth 471.33 ETH.

GMBL Computer is a DeFi Gambling Protocol running on the Arbitrum chain. On September 5, 2023, the project's referral system was exploited. The attacker took advantage of a vulnerability that allowed them to place "Ghost" bets on a game, which were registered as losses, and thus enabled the claiming of 5% of these "Ghost" bet losses.

The attacker placed massive "Ghost" bets with one account that was referred by another account, allowing the second account to claim over 8 million $GMBL in referrals before the exploit was stopped. The stolen funds were swapped for ETH and sent to another EOA. Out of the stolen 471.33 ETH, 235.5 ETH was later returned.

Attacker Address:

Address 0x2d6f…bd41

Funds Holder as of Sep 15, 2023:

Address 0x2D6F…bD41

Malicious Transactions:

Tx 0x339c…8608

Tx 0xc8db…5e8b

Funds Returning Transaction:

Tx 0xa020…5685

Proposal of Returning Funds:

Tx 0xfb1b…8ea7

Protocol details

Classification Protocol Logic / Other / Input Validation
Protocol Type Exploit/Other
Affected asset / contract GMBL Computer CHiP
Protocol links Website @gmblcomputer

Funds Recovery

47.1%

Recovered

$384K

Net Loss

$431,135

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.