What happened
Visor Finance's June 2021 incident involved a compromised administrator account. The attacker used an emergency-withdraw capability to take approximately $500,000 in deposits that had not yet entered liquidity-provider positions. Visor said treasury funds reimbursed the affected users.
A single account could exercise privileged Hypervisor withdrawal functions. Compromising that account exposed unallocated deposits; Visor stated that the incident did not exploit its smart-contract code.
How it happened
- The attacker obtained access to an account controlling Hypervisor administrative functions.
- They used the emergency-withdraw capability to remove unallocated deposits.
- Visor replaced the stolen amounts from its treasury and said it had corrected the use of single-account administrative control.
Protocol details
Funds Recovery
Recovered
$505K
Net Loss
$0
Evidence
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
