What happened
Quick Summary
Goledo Finance suffers a $1.7 million loss in a flash loan attack on the Conflux blockchain.
Details of the Exploit
On January 29th, 2024, Goledo, a cross-chain lending and borrowing protocol based on Aave, was attacked through a flash loan exploit on the Conflux blockchain. The team identified the issue as a flash loan attack, resulting in a loss of 7.9 million CFX (approximately $1.7 million USD). The attacker left an on-chain message on January 29th, stating, "I hacked Goledo and want to negotiate."
Block Data Reference
Attacker Address:
On-chain Message from the Attacker:
Protocol details
Classification
Borrowing and Lending / Oracle Manipulation
Protocol Type
Lending
Affected asset / contract
GOL
Implementation language
Solidity
Protocol links
Website
@GoledoFinance
Security review history
- PeckShield View report
Evidence
- report @GoledoFinance incident report twitter.com
- analysis Web Archive archive.ph
- analysis DeFiLlama defillama.com
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
