- Amount Lost: $13,073,700.00
- Funds Returned: $0.00
- Category: Other
- Date: 2022-10-27
Quick Summary
Team Finance was hacked for 13,073,700 $USD due to a migration functionality exploit. The stolen funds currently remain on the attacker's EOA address.
Details of the Exploit
Team Finance is a DeFi platform providing secure token-locking opportunities. The project's vault smart contract was exploited due to the vulnerability of a migration functionality. The hacker used a deployed smart contract with unverified source code to withdraw 13,073,700 $USD worth of assets from the project's vault. All the stolen funds currently remain in the attacker's second EOA address.
Block Data Reference
Attacker addresses:
https://etherscan.io/address/0x161cebb807ac181d5303a4ccec2fc580cc5899fd
https://etherscan.io/address/0xba399a2580785a2ded740f5e30ec89fb3e617e6e
Malicious contract:
https://etherscan.io/address/0xcff07c4e6aa9e2fec04daaf5f41d1b10f3adadf4
Malicious transaction:
https://etherscan.io/tx/0xb2e3ea72d353da43a2ac9a8f1670fd16463ab370e563b9b5b26119b2601277ce
Proof Links: