Real Arithmetic Overflow & Underflow Hacks

Real incidents mapped to arithmetic overflow & underflow. Start with the records, open the source, then use the attack guide when an incident matches the code you are reviewing.

Open full database Read attack guide

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
1 Cetus CLMM $260M sui Arithmetic Overflow & Underflow Attacks Details Source
2 Compound V2 $147M ethereum Arithmetic Overflow & Underflow Attacks Details Source
3 Uranium Finance $57.2M binance, bsc Arithmetic Overflow & Underflow Attacks Details Source
4 KyberSwap Elastic $48.0M arbitrum, base, ethereum, optimism, polygon Arithmetic Overflow & Underflow Attacks Details Source
5 Sonne $20.0M — Arithmetic Overflow & Underflow Attacks Details Source
6 ValueDefi $11.0M bsc, ethereum Access Control Attacks Details Source
7 Velocore V2 $6.8M linea, zksync era Access Control Attacks Details Source
8 Abracadabra Spell $6.5M ethereum Arithmetic Overflow & Underflow Attacks Details Source
9 Abracadabra Money $6.4M — Arithmetic Overflow & Underflow Attacks Details Source
10 1inch $5.0M ethereum Access Control Attacks Details Source
11 Radiant Capital $4.3M — Arithmetic Overflow & Underflow Attacks Details Source
12 Mobius Token $2.2M bsc Arithmetic Overflow & Underflow Attacks Details Source
13 Thetanuts Finance $2.1M ethereum Arithmetic Overflow & Underflow Attacks Details Source
14 Merlin Labs $680K binance, bsc Arithmetic Overflow & Underflow Attacks Details Source
15 Midas Capital $600K bsc Arithmetic Overflow & Underflow Attacks Details Source
16 Tropykus RSK $150K rootstock Arithmetic Overflow & Underflow Attacks Details Source
17 MANTRA Chain — mantra Access Control Attacks Details

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.

Arithmetic Overflow & Underflow Attacks guide Understand the exploit pattern behind these incidents. Full hack database Filter every tracked incident by chain, date, loss size, and technique. Attack class library Move from incident examples to exploit mechanics and review checklists.