Leo Finance Hack

Reported loss $42K
Ethereum
Other

What happened

On October 11, 2020, an attacker obtained the key governing WLEO minting, created false WLEO, and exchanged it for ETH from the WLEO-ETH Uniswap pool. LeoFinance's investigation says the attack was confined to WLEO on Ethereum and that LEO on Hive was safe; the team halted the app and secured remaining pool ETH for liquidity-provider redistribution.

How it happened

  1. The attacker obtained the private key governing WLEO minting on Ethereum.
  2. They used that authority to mint false WLEO to an address they controlled.
  3. The false WLEO was repeatedly swapped for ETH in the WLEO-ETH Uniswap pool.
  4. The team stopped wrapping, unwrapping, and minting, then secured remaining ETH for affected liquidity providers.

Protocol details

Classification Other / Token & Share Accounting
Protocol Type Exploit/Other
Affected asset / contract WLEO
Implementation language Solidity
Protocol links Website @financeleo

Evidence

Same attack technique

Browse all hacks →
Solana Raydium $1.3M lost Elrond Maiar DEX $113M lost Polygon PolyYeld Finance $250K lost Ethereum Axion Network $1.1M lost

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes