What happened
The attacker's wallet:
https://ftmscan.com/address/0x12efed35…ce905e
The exploit contract:
https://ftmscan.com/address/0x6a6d593e…0b5a58
The transaction behind the attack:
https://ftmscan.com/tx/0xca8dd338…a70145
The attack was enabled via a flash loan-assisted price manipulation of the LP tokens, which resulted in a greater quantity of OShare tokens being removed from the protocol.
After the contract deployment, the hacker borrowed $80m USDC utilizing Solidly flash loans to boost the price of our underlying LP tokens in a single block, changing the price of OShare and driving a huge number of OShare tokens out of the protocol.
Stolen funds were bridged to Ethereum and deposited into Tornado Cash mixer:
https://etherscan.io/address/0x12efed35…ce905e
Case & protocol details
Evidence & learning
Attack pattern
Compare incidents →Sources and on-chain records
- report Post-mortem medium.com
- report Report twitter.com
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.