Real Arithmetic Overflow & Underflow Hacks

Real incidents mapped to arithmetic overflow & underflow. Start with the records, open the source, then use the attack guide when an incident matches the code you are reviewing.

Open full database Read attack guide

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
1 Cetus CLMM $260M sui Arithmetic Overflow & Underflow Attacks Details Source
2 Uranium Finance $57.2M binance, bsc Arithmetic Overflow & Underflow Attacks Details Source
3 KyberSwap Elastic $48.0M arbitrum, base, ethereum, optimism, polygon Arithmetic Overflow & Underflow Attacks Details Source
4 Sonne Finance $20.0M optimism Arithmetic Overflow & Underflow Attacks Details Source
5 ValueDefi $11.0M bsc, ethereum Access Control Attacks Details Source
6 Velocore V2 $6.8M linea, zksync era Access Control Attacks Details Source
7 Abracadabra Money $6.4M ethereum Arithmetic Overflow & Underflow Attacks Details Source
8 1inch $5.0M ethereum Access Control Attacks Details Source
9 Radiant Capital $4.3M arbitrum Arithmetic Overflow & Underflow Attacks Details Source
10 MANTRA Chain $3.6M mantra Access Control Attacks Details Source
11 Mobius Token $2.2M bsc Arithmetic Overflow & Underflow Attacks Details Source
12 Midas Capital $600K bsc Arithmetic Overflow & Underflow Attacks Details Source
13 Merlin Labs $550K binance, bsc Arithmetic Overflow & Underflow Attacks Details Source
14 Tropykus RSK $150K rootstock Arithmetic Overflow & Underflow Attacks Details Source
15 Thetanuts Finance $105K ethereum Arithmetic Overflow & Underflow Attacks Details Source
16 Compound V2 — ethereum Arithmetic Overflow & Underflow Attacks Details Source

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.

Arithmetic Overflow & Underflow Attacks guide Understand the exploit pattern behind these incidents. Full hack database Filter every tracked incident by chain, date, loss size, and technique. Attack class library Move from incident examples to exploit mechanics and review checklists.