What happened
Level Finance was exploited, resulting in the loss of 214,000 $LVL tokens worth approximately 2,780,320 $USD.
Level Finance is a decentralized perpetual exchange running on the Binance Smart Chain. The project suffered an exploit that had targeted their Referral Controller Contract. The attacker could claim referral amounts as $LVL tokens multiple times by executing multiple transactions to drain the contract.
As a result, 214k LVL tokens were drained from the contract and swapped for 3,345 $BNB which is equivalent to 1,097,160 $USD at current prices. All stolen funds remain controlled by the hacker who initiated this attack using the address: 0x61bb...412e and holds them on another address: 0x7031...a9d5. Fortunately, LPs and DAO treasury remained unaffected by this exploit since it was isolated from other contracts.
Attacker Address:
Funds Holder Address: Address 0x7031…a9d5
Malicious Contract Address: Address 0xf08a…f629
Affected Proxy Contract Address: Address 0x9770…063a
Affected Implementation Contract Address (LevelReferralControllerV2): Address 0x9f00…f464
Protocol details
Security review history
- Obelisk Auditing View report
Evidence
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
