DeFi Hack Incidents

• 重入攻击
  • Reentrancy Attack
    • 200419 Lendf.Me
    • 210830 C.R.E.A.M.
    • 220315 Agave Finance
    • 220315 Hundred Finance
    • 220331 Ola Finance
    • 220430 Rari Capital
  • Read-only Reentrancy Attack
    • 230405 Sentiment Platform
• 价格操控 Price Manipulation
  • Spot Price Manipulation：单点操控
    • 220513 Venus Protocol: Chainlink Oracle
    • 220513 Blizz Finance: Chainlink Oracle
    • https://scsfg.io/hackers/oracle-manipulation
  • Indirect Price Manipulation Attack
  • Controllable swap token/path
    • 防御角度：进行一些输入的检测
  • Non-standard token
    • Deflationary token
    • Inflationary token (reward token)
    • Rebasing token
    • FoT (Fee on Transfer)
    • 221210 Lodestar Finance
  • Flawed verification
    • 'K' Value Verfication in UniSwapV2
    • Flawed Slippage Verfication
  • Precision loss 精度问题
    • Compound V2 Fork
      • 230415 Hundred Finance
      • 230424 Jarvis Network
      • 230617 Midas Capital: a fork of Compound, Similar to Hundred Finance
      • 230704 BAOCommunity
      • 231101 OnyxProtocol
      • 231125 Metalend
      • 231230 Channel Finance
    • HopeLend Like
      • 231018 HopeLend
      • 231110 Mahalend
    • 230827 Balancer Incident
  • Insufficient access control
  • Insistent calculation between adding and removing liguidity
  • 230427 Silo Finance #🚧/3 有待弄清其发生的原理

• 随机数攻击
  • Fomo3D
• 存储攻击
  • 230224 EFVault - Storage Collision
• Flawed Access Control
  • Rubixi Hack: Mismatched Constructor
• 231204 thirdweb