What happened
The Quint project was attacked by hackers in the amount of $130K. The attacker took advantage of the vulnerability, thanks to which he was able to withdraw his rewards again.
Quint is a stacking and farming platform where users can stake $QUINT at low transaction fees while enjoying the rewards in the form of a variety of tokens.
The attack occurred due to a vulnerability in the contract called by the reStake() function. When this function is performed, the reward time in LP tokens is not updated, as a result an attacker can claim the issued rewards several times.
Attacker account addresses:
Protocol details
Evidence
- report Report quint.io
- analysis Web Archive web.archive.org
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
