Zunami Protocol Hack

TOTAL LOST $2.2M
Medium Flash Loan Attacks ethereum

What happened

Quick Summary

Zunami Yield Aggregator Suffers Flash Loan Attack; Loss of $2,177,741 Worth Approximately 1,180 ETH.

Details of the Exploit

On August 13th, 2023, Zunami, a Yield Aggregator on the Ethereum chain, was compromised through a flash loan attack. The attacker exploited a price manipulation issue in two transactions, utilizing a donation method to miscalculate the price. The stolen funds, totaling $2,177,741 or roughly 1,180 ETH, were deposited into TornadoCash, a privacy solution for anonymizing transactions.

Block Data Reference

Attacker Address:

https://etherscan.io/address/0x5f4C21c9…B146DF

Malicious Transactions:

https://etherscan.io/tx/0x0788ba22…e8cceb

https://etherscan.io/tx/0x2aec4fdb…690cca

Malicious Contract:

https://etherscan.io/address/0xA21a2B59…0e5d75

TornadoCash Deposit Transaction:

https://etherscan.io/tx/0x507dcec5…36f5b7

Case & protocol details

Classification Ecosystem / Yield Aggregator / Oracle Manipulation
Protocol Type Yield Aggregator
Affected asset / contract UZD
Smart Contract Language Solidity
Official Website www.zunami.io/
Protocol Twitter/X @ZunamiProtocol

Evidence & learning

Attack pattern

Compare incidents →
Flash Loan Attacks Oracle Manipulation & Price Manipulation

Sources and on-chain records

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes