Tales of Elleria Hack

REPORTED LOSS $280K
Low Access Control arbitrum

What happened

19th of the April 2023 TalesofElleria was exploited for about  $280,000 USD.

The exploiter minted 5,000,000,000 $ELM and drained the LP, looks like the private key or signing method was compromised. The attacker bridged 140 $ETH to Ethereum and transferred them to FixedFloat. He made 4 transactions to withdraw $ELM from the bridge.

Findings suspect that Ecrecover Function allowed the attacker to generate authorization signatures without TalesofElleria private keys.

Exploited contract:

https://arbiscan.io/address/0xfcd20195…7cc2b9

Case & protocol details

Classification Gaming / Metaverse,Token / Bridge & Cross-Chain
Protocol Type Exploit/Access control
Affected asset / contract ELM
Implementation language Solidity

Evidence & learning

Sources and on-chain records

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.