Peapods Finance Hack

On July 8, 2025, Peapods Finance suffered an exploit resulting in the loss of approximately $200,000 (about 78 ETH). The stolen funds were sent to ChangeNow and FixedFloat, making tracking and recovery more difficult.

Transaction log reveals a sophisticated DeFi exploit that manipulated a lending protocol's interest rate calculations to artificially generate massive interest earnings. The attacker then extracted collateral without proper debt settlement, used zero-amount transactions to bypass validation checks, and executed a complex arbitrage chain across multiple DEX pools to convert stolen assets into WETH. This appears to be a flash loan attack that exploited timing vulnerabilities and insufficient validation in the protocol's lending logic, resulting in significant financial losses for the protocol.

Victim address:

https://etherscan.io/address/0xd1538a9d…967257

Exploiter address:

https://etherscan.io/address/0x277da2d1…52a846

Withdraw tx:

https://etherscan.io/tx/0xa8f560f7…3d5448