Tales of Elleria Hack

Reported loss $280K
Arbitrum
Access Control

What happened

Quick Summary

19th of the April 2023 TalesofElleria was exploited for about  $280,000 USD.

Details of the Exploit

The exploiter minted 5,000,000,000 $ELM and drained the LP, looks like the private key or signing method was compromised. The attacker bridged 140 $ETH to Ethereum and transferred them to FixedFloat. He made 4 transactions to withdraw $ELM from the bridge.

Findings suspect that Ecrecover Function allowed the attacker to generate authorization signatures without TalesofElleria private keys.

Block Data Reference

Exploited contract:

Address 0xfcd2…c2b9

Protocol details

Classification Gaming / Metaverse / Token / Bridge & Cross-Chain
Protocol Type Exploit/Access control
Affected asset / contract ELM
Implementation language Solidity

Evidence

Understand the attack patterns

Compare incidents →
Access Control Attacks

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes