Incident Overview
On July 8, 2025, Peapods Finance suffered an exploit resulting in the loss of approximately $200,000 (about 78 ETH). The stolen funds were sent to ChangeNow and FixedFloat, making tracking and recovery more difficult.
Transaction log reveals a sophisticated DeFi exploit that manipulated a lending protocol's interest rate calculations to artificially generate massive interest earnings. The attacker then extracted collateral without proper debt settlement, used zero-amount transactions to bypass validation checks, and executed a complex arbitrage chain across multiple DEX pools to convert stolen assets into WETH. This appears to be a flash loan attack that exploited timing vulnerabilities and insufficient validation in the protocol's lending logic, resulting in significant financial losses for the protocol.
Victim address:
https://etherscan.io/address/0xd1538a9d…967257
Exploiter address:
https://etherscan.io/address/0x277da2d1…52a846
Withdraw tx:
https://etherscan.io/tx/0xa8f560f7…3d5448
Incident Report
Protocol Information
Market Context at Time of Hack
What the Attacker Needed to Succeed
Understanding the prerequisites for this type of attack helps auditors identify protocols that are most at risk and helps developers build better defenses.
What Auditors Should Check
If you're auditing a protocol with similar architecture to Peapods Finance , these are the critical security checks that could have prevented this incident (July 2025).
- Verify all logic paths related to Oracle manipulation in user-created Pods / Other are guarded by proper access controls and input validation - see the Oracle Manipulation & Price Manipulation attack class for patterns
- Audit oracle price feeds for manipulation risks - ensure time-weighted average prices (TWAPs) or multi-source aggregators are used, not spot prices
- Review privileged functions (owner, admin, governance) for potential abuse vectors - centralization risks should be documented and bounded with timelocks or multi-sigs
Master these auditing techniques with hands-on labs and real exploit scenarios in the Smart Contract Hacking course.
Free TrialSecurity Audit History
- Audit Report 1 Report
Related Attack Classes
The technique used in this hack maps to these vulnerability classes in our security curriculum:
Sources & References
- 01
- 02
- 03
Learn to Prevent the Next Peapods Finance
The Peapods Finance hack is one of many attacks that skilled auditors are trained to detect before deployment. Master real exploit patterns and defense techniques with hands-on Web3 security training.