Nimbus DAO Hack

TOTAL LOST $76K
Low Flash Loan Attacks bsc

What happened

Quick Summary

Nimbus DAO protocol was exploited via FlashLoan attack. The attacker stole worth around $76,000 USD.

Details of the Exploit

The flashloan was used for the price oracle manipulation and the NIMB/NBU_WBNB pool was affected. Exploit led to the unfair reward distribution in getReward() function.

In case, of computation of the token reward is proportional to the ratio of $NIMB and $GNIMB in the pool, the ratio of Nimbus Utility tokens to Nimbus Governance tokens was broken. To repay the flash loan, the exploiter exchanged $GNIMB for $BNB.

Block Data Reference

Attacker address:

https://bscscan.com/address/0x86aa1c46…95b597

Malicious transactions:

https://bscscan.com/tx/0x42f56d3e…90f6c1

https://phalcon.blocksec.com/tx/bsc/0x42f56d3e…90f6c1

Case & protocol details

Classification Other / Protocol Logic
Protocol Type Exploit/Flash Loan Attack
Affected asset / contract NBU
Smart Contract Language Solidity
Official Website nimbusplatform.io/
Protocol Twitter/X @nmbplatform

Evidence & learning

Attack pattern

Compare incidents →
Flash Loan Attacks

Sources and on-chain records

Browse all hacks

Other incidents recorded with the same attack technique.

WUSD.fi $207K
New Free DAO $1.3M
EVODeFi $1.7M

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes