Rocket Pool Hack

TOTAL LOST $3.8M
Medium Phishing Attacks ethereum

What happened

Quick Summary

On March 30, 2023, the RPL balance of the poap.eth wallet (0xf6B6F078…A9C863) was drained due to a phishing attack.

Details of the Exploit

The attacker used a phishing attack against the owner of the poap.eth wallet and gained a significant allowance in RPL tokens. Two different exploiter addresses then executed the transferFrom() function, resulting in the theft of 21,474 and 64,423 tokens. The RPL tokens were subsequently swapped to ETH and dispersed between a few different wallets.

Block Data Reference

Approve tx:

https://etherscan.io/tx/0xd36e7d75…373add

transferFrom tx:

https://etherscan.io/tx/0x13cd0edd…d0f632

https://etherscan.io/tx/0xc3a9d6e4…69819b

Case & protocol details

Classification Other / Social Engineering
Protocol Type Liquid Staking
Affected asset / contract RPL
Official Website rocketpool.net/
Protocol Twitter/X @Rocket_Pool

Security review history

Evidence & learning

Attack pattern

Compare incidents →
Phishing Attacks

Sources and on-chain records

Browse all hacks

Other incidents recorded with the same attack technique.

Whale Wallet Drain $25.6M
USDC Permit Signature Phishing $1.8M
Social Engineering Scam $282M
Address Poisoning Attack $50.0M

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes