uniswap-530UniswapA known reentrancy vulnerability was exploited on Uniswap against the imBTC. liquidity pool. Around 24 hours later, at Apr-19–2020 12:58:43 AM +UTC, a similar hack occurred on Lendf.Me.” reads the analysis published by Blockchain security firm PeckShield. “Technically, the main logic behind these two incidents is the fact that the implementation of ERC777-compatible transferFrom() has a callback mechanism, which allows the attacker to utterly hijack the transaction and perform additional illicit operations (via _callTokensToSend()) before the balance is really updated (i.e., inside _move()). Uniswap was hacked and lost 1278 ETH.

Detail Analysis

< Back

Uniswap

Submit Incident Report

Date:

Status:

Count:

Contributor:

April 18, 2020

Verified

zerofriction.io

Loss Amount:

242,000

Recovered Amount:

Currency:

Dollars, imBTC

KYC By:

Audit By:

None

Website:

https://info.uniswap.org/

Twitter:

No data

Discord:

No data

Telegram:

No data

Medium:

No data

Github:

No data

Key Indicators

Platform:

Type:

Category:

Method:

Multi-Chain

Protocol

Dexes

Contract Vulnerabilities

Extended Method:

Reentrancy attack

Data Sources:

https://securityaffairs.co/wordpress/101895/cyber-crime/uniswap-lendf-me-hacked.html

A known reentrancy vulnerability was exploited on Uniswap against the imBTC. liquidity pool. Around 24 hours later, at Apr-19–2020 12:58:43 AM +UTC, a similar hack occurred on Lendf.Me.” reads the analysis published by Blockchain security firm PeckShield. “Technically, the main logic behind these two incidents is the fact that the implementation of ERC777-compatible transferFrom() has a callback mechanism, which allows the attacker to utterly hijack the transaction and perform additional illicit operations (via _callTokensToSend()) before the balance is really updated (i.e., inside _move()). Uniswap was hacked and lost 1278 ETH.

DISCLAIMER: While Zero Friction LLC has used the best efforts in aggregating and maintaining this database, Zero Friction LLC makes no representations or warranties with respect to the accuracy or completeness, and specifically disclaim any implied warranties of merchantability or fitness for any particular purpose.

Under no circumstances, shall Zero Friction LLC be liable for any loss of profit or funds, any regulatory or governmental penalties, any legal costs, or any other commercial and non-commercial damages, including but not limited to special, incidental, consequential, or other damages from any or all usage of the dataset or information derived from our database.

< Back