Goledo Finance Hack

TOTAL LOST $1.7M
Medium Flash Loan Attacks conflux

What happened

Quick Summary

Goledo Finance suffers a $1.7 million loss in a flash loan attack on the Conflux blockchain.

Details of the Exploit

On January 29th, 2024, Goledo, a cross-chain lending and borrowing protocol based on Aave, was attacked through a flash loan exploit on the Conflux blockchain. The team identified the issue as a flash loan attack, resulting in a loss of 7.9 million CFX (approximately $1.7 million USD). The attacker left an on-chain message on January 29th, stating, "I hacked Goledo and want to negotiate."

Block Data Reference

Attacker Address:

https://evm.confluxscan.net/address/0x0ad18233…30a305

On-chain Message from the Attacker:

https://evm.confluxscan.net/tx/0x9359dbee…6526d9

Case & protocol details

Classification Borrowing and Lending / Oracle Manipulation
Protocol Type Lending
Affected asset / contract GOL
Smart Contract Language Solidity
Official Website www.goledo.cash/markets
Protocol Twitter/X @GoledoFinance

Security review history

Evidence & learning

Attack pattern

Compare incidents →
Flash Loan Attacks Oracle Manipulation & Price Manipulation

Sources and on-chain records

Browse all hacks

Other incidents recorded with the same attack technique.

New Gold Protocol $2.0M
ZongZi $230K
Carson $150K
QuickSwap $220K

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes