RAI Finance Hack

TOTAL LOST $414K
Low Other

What happened

To connect the liquidity between ERC20 and BSC, RAI Finance has been using Chainswap to ensure the liquidity between both blockchains.

RAI Finance reserved 2.9M RAIs to an address 0x9D4D377c…5CcDe3, and this address automatically approves the spent access to the Chainswap’s bridge contract.

The Chainswap smart contract for RAI spend access has been exploited on Jul-03–2021 12:39:18 AM +UTC, from the contract address 0x0e128fb9…d51b84 which has access up to 2.9M RAIs in total at the account.

Case & protocol details

Classification Yield Aggregator
Protocol Type Exploit/Other
Affected asset / contract RAI
Official Website rai.finance/
Protocol Twitter/X @RaiFinance

Funds Recovery

100.0%

Recovered

$414K

Net Loss

$0

Evidence & learning

Sources and on-chain records

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.