What happened
The attacker's address:
https://etherscan.io/address/0xa3f447fe…619264
The attacker:
- received ~100 ETH from Tornado Cash to ensure his privacy:
https://etherscan.io/tx/0x1423391a…5f8cba
- swapped 56.81 ETH to 254,783 USDC
-swapped 232,509 USDC to 222,403 VUSD on the Uniswap v3
- added liquidity into "infinity" price range using 0 VUSD and 0.1 USDC:
https://etherscan.io/tx/0x89d0ae4d…ecf4c5
- deposited VUSD as collateral into the Vesper Rari Fuse pool #23 and was able to borrow all available assets:
https://ethtx.info/mainnet/0x8527fea5…af8092/
- The Rari lending market received the VUSD price using Rari's price oracle:
https://etherscan.io/address/0xb3c8ee73…36d8fb
, and valued VUSD collateral at a price of “infinity”
- swapped stolen assets on ETH:
https://etherscan.io/tx/0x70d6ff9f…19bc7d
- deposited ETH into Tornado Cash mixer:
https://bloxy.info/txs/calls_from/0xa3f447fe…619264?signature_id=994162&smart_contract_address_bin=0x722122df…5b6967
Case & protocol details
Evidence & learning
Attack pattern
Compare incidents →Sources and on-chain records
- report Report x.com
- report Post-mortem medium.com
- analysis Website reference twitter.com
- analysis Website reference twitter.com
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.