Skyward Finance Hack

TOTAL LOST $3.0M
Medium Reentrancy near

What happened

Quick Summary

Skyward Finance was exploited via smart contract vulnerability. Funds loss reached approximately 3,000,000 $USD

Details of the Exploit

Skyward Finance is a decentralized exchange. The project's treasury was exploited on the NEAR chain. The attacker called redeem_skyward() function multiple times and transferred the funds to another address after an incident.

The funds loss is roughly 3,000,000 $USD.

Block Data Reference

Attacker address:

https://explorer.near.org/accounts/5ebc5ecca14a44175464d0e6a7d3b2a6890229cd5f19cfb29ce8b1651fd58d39

Malicious transaction:

https://explorer.near.org/transactions/92Gq7zehKPwSSnpoZ7LGGtSmgmBb4wP2XNDVJqUZRGqz

Case & protocol details

Classification Protocol Logic / Exchange (DEX),Token / Input Validation
Protocol Type Exploit/Other
Affected asset / contract SKYWARD
Smart Contract Language Rust
Official Website app.skyward.finance/
Protocol Twitter/X @skywardfinance

Evidence & learning

Attack pattern

Compare incidents →
Reentrancy

Sources and on-chain records

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes