OpenOcean Hack

TOTAL LOST $22K
Low Other

What happened

On February 11, 2025, OpenOcean detected an attack on its newly launched Limit Order contract on Base. The issue was immediately mitigated by pausing the affected contract and deploying a more secure implementation. User funds remain safe, and no revoke actions are needed.

(total loss: $22K) are being notified and assisted.

The exploit targeted a vulnerability in OpenOcean’s Limit Order contract on Base, but was quickly neutralized when the team paused the contract, preventing any further malicious activity. Since the proxy contract remained under OpenOcean’s control, the hacker was unable to drain additional funds. Some mistakenly interpreted the attacker’s post-exploit trading activity as further attacks, but OpenOcean confirmed that these transactions were unrelated to its contracts.

Case & protocol details

Classification Exchange (DEX)
Protocol Type DEX Aggregator
Official Website app.openocean.finance/
Protocol Twitter/X @OpenOceanGlobal

Evidence & learning

Sources and on-chain records

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.