DeFiHackLabs - Reproduce DeFi hacked incidents using Foundry.

项目说明

DeFi Hacks Reproduce - Foundry

Reproduce DeFi hack incidents using Foundry.

883 incidents included.

Let's make Web3 secure! Join Discord

Notion: 101 root cause analysis of past DeFi hacked incidents

Transaction debugging tools

Disclaimer: This content ser as a proof of concept showcasing past DeFi hacking incidents. It is strictly intended for educational purposes and should not be interpreted as encouraging or endorsing any form of illegal acti or actual hacking attempts. The provided information is for informational and learning purposes only, and any actions taken based on this content are solely the responsibility of the indi. The usage of this information should adhere to applicable laws, regulations, and ethical standards.

* Getting Started
* Who Support Us
* Donate Us
* List of Past DeFi Incidents
* Transaction debugging tools
* Ethereum Signature Database
* Useful tools
* Hacks Dashboard
* List of DeFi Hacks & POCs

Getting Started

Follow the instructions to install Foundry.

Clone and install dependencies:git submodule update --init --recursive

Contributing Guidelines

Web3 Cybersecurity Academy

All articles are also published on Substack.

OnChain transaction debugging

Lesson 2: Warm up ( English | 中文 | Korean | Spanish | 日本語 )

Lesson 3: Write Your Own PoC (Price Oracle Manipulation) ( English | 中文 | Korean | Spanish | 日本語 )

Lesson 4: Write Your Own PoC (MEV Bot) ( English | 中文 | Korean | Spanish | 日本語 )

Lesson 5: Rugpull Analysis ( English | 中文 | Spanish | 日本語 )

Lesson 6: Write Your Own PoC (Reentrancy) ( English | 中文 | Spanish | 日本語 )

Lesson 7: Hack Analysis: Nomad Bridge, August 2022 ( English | 中文 | Spanish | 日本語 )

Donate us

If you appreciate our work, please consider donating. Even a small amount helps us continue de and improving our projects, and promoting web3 security.

Gitcoin - Donate DeFiHackLabs

E - 0xD7d6215b4EF4b9B5f40baea48F41047Eb67a11D5

Giveth

List of Past DeFi Incidents

20261003 MALT

20261002 GoldPesa

20261001 FlashLoopAdapter

20260930 SKYDAO

20260930 PositionManager

20260930 MUS

20260929 LPBonus

20260926 DAOstack

20260923 Pancake

20260921 DoinGud

20260921 GaslessReser

20260921 InternetToken

20260918 Likwid

20260916 Startale

20260916 Flamincome

20260916 PrimeFinance

20260916 Nimiq

20260915 RsETHSafeModule

20260915 BonfireSwap

20260912 SpiralHookV2

20260912 YamFinance

20260911 ORB

20260911 GDC

20260909 EtherFiAtomicQueue

20260909 OMNI404

20260909 UnifiProtocol

20260909 BeatXswap

20260909 EnsoFinance

20260909 ZentraFinance

20260908 OrderFactory

20260907 RouterDrain

20260907 CozyFinance

20260905 DHC

20260905 Reddio

20260905 SecuredFi

20260903 NotionalFinance

20260901 ReflexerGEB

20260831 FloatProtocol

20260831 Balancer

20260828 AjnaFinance

20260827 CashCowCoin

20260826 EnjinCryptoItems

20260825 FHToken

20260823 ArrakisGUNI

20260823 TermFinance

20260822 SandboxOFT

20260819 AllbridgeCCTP

20260809 USM

20260806 UnistreetLaunchpad

20260805 StrongBlock

20260803 AIC

20260706 SummerFi

20260701 edel-xstock

20260629

20260628 AIDC

20260627 CookFinanceIssuance

20260625 LixirPermitDrain

20260625 OceanBPoolSideStaking

20260624 DLMC

20260623 RoyalRoyalties

20260622 Aztec Escape Hatch

20260622 ATM

20260620 OLPC

20260618 JB

20260617 WHALE

20260617 LBP

20260617 Aztec V1

20260616 DIP

20260615 Thetanuts

20260614 Aztec Connect

20260609 TOPBPool

20260609 NovaBox

20260607 AmbientCrocSwapDex

20260606 BOSS

20260605 DTXT

20260605 AISOTHPresale

20260604 BYToken

20260604 ATM Token

20260530 AROS

20260529 YSDAO

20260528 LegendaryMoneyMonNft

20260528 DxSale

20260527 Joe Agent

20260526 SKP Token

20260525 SquidRouterModule

20260525 New Market Trading

20260525 WUSD.fi

20260522 FractalProtocol

20260521 MureDistribution

20260520 MAPProtocol

20260519 Ele

20260518 TesseraSwap

20260517

20260517 SEAToken

20260515 AdsharesBridge

20260512 SQTokenStaking

20260511 INKFinance

20260511 HumaFinance

20260510 Renegade

20260507 Trusted

20260505 Ekubo

20260501 SharwaMarginTrading

20260428 RWAVault

20260428 JUDAO

20260427 Un

20260425 SingularityDynaVault

20260423 Giddy

20260421 KipseliPropAMM

20260420 JuiceboxRE

20260420 Thetanuts

20260419 Aation

20260415 XLootStaking

20260414 MONA LisaVault

20260414 Saturn Protocol

20260412 SubQuerySettings

20260407 SquidMulticallAllowanceDrain

20260405 PerpPair

20260331 WhalebitOracleManipulation

20260328

20260327 EST Token

20260324 XocolatlLiquidator

20260324 Uni

20260323 BCE

20260319 ATMBlindBox

20260319 Revamp

20260316 un

20260315 Venus THE

20260315 StakeOnMe

20260310 AlkemiEarn

20260302 Cur

20260222 LAXO Token

20260216 XDKRecycle

20260215 Moonwell

20260120 Makina

20260120 SynapLogic

20260112 MTToken

20260110 FutureSwap

20260109 Truebit

20260101 PRXVT

20251201 yETH

20251110 DRL

20251104 Moonwell

20251103 BalancerV2

20251020 SharwaFinance

20251007 TokenHolder

20251004 MIMSpell3

20250918 NGP

20250913 Kame

20250831 Hexotic

20250830 E

20250827 0xf340

20250823 EquilibriaEPendle

20250823 ABCCApp

20250822 Un

20250820 MulticallWithXera

20250820 0x8d2e

20250819 PresaleV5

20250817 AutoPooledTradingBot

20250816 un

20250816 d3xai

20250815 SizeFlashLoanLooping

20250815 PDZ

20250815 SizeCredit

20250813 BeefyZapRouter

20250813 YuliAI

20250813 coinbase

20250813 Grizzifi

20250812 BaseBebopSettlement

20250812 Bebop

20250811 WXC

20250808 ArbitrumBaseSwapper

20250805 MyCoinMaster

20250804 BscInitcodeToken

20250801 PendleReflector

20250729 AnyswapWETHPermit

20250728 SuperRare

20250728 A

20250726 Un

20250726 MulticallWithETH

20250725 WhereIsMyDragonTreasure

20250724 SWAPPStaking

20250724 EmptySetReserve

20250721 BoJLe

20250720 Stepp2p

20250717 un

20250717 WETC

20250716 StrategyLlamaLendConvex

20250716 VDS

20250713 UPENG

20250709 GMX

20250705 Acti

20250705 Un

20250705 RANT

20250702 FPC

20250702 Acti

20250629 Stead

20250628 InitcodeFactoryFees

20250626 ResupplyFi

20250625 Un

20250625 SiloFinance

20250625 ParaSwapDAIApproval

20250623 GradientMakerPool

20250620 TokenVault

20250620 HoldSafe

20250620 Gangsterfinance

20250619 SinstakeZombie

20250619 BasePricePool

20250619 BankrollStack

20250619 BankrollNetwork

20250618 BankrollStackPlus

20250617 MetaPool

20250615 WaleCoin

20250615 FixedTokenBSwap

20250614 TSAggregatorGeneric

20250612 AA

20250610 un

20250609 BitCrown

20250608 TokenFactory

20250603 PegaBall

20250531 DogeAlliance

20250528 Corkprotocol

20250528 Un

20250527 UsualMoney

20250526 YDT

20250525 Un

20250525 Dumbo

20250524 RICE

20250520 IRYSAI

20250519 BetaPresale

20250518 KRC

20250516 Bitallx

20250514 Unwarp

20250511 MBUToken

20250509 Nalaku

20250506 Crosswise

20250429 FlyLong

20250428 tcdp

20250427 bitdog

20250427 multitransferswap

20250427 A

20250426 Lifeprotocol

20250426 ImpermaxV3

20250418 BTNFT

20250416 Roar

20250416 Y

20250411 Un 0x6077

20250408 Laundromat

20250407 AmpKashi

20250404 AIRWA

20250330 Le

20250328 Alkimiya_IO

20250327 YziAIToken

20250320 BBXToken

20250318 DCFToken

20250318 un

20250316 wKeyDAO

20250314 H2O

20250311 ZeroExSettler

20250311 DUCKVADER

20250307 StackMarket

20250307 UNI

20250307 SBRToken

20250306 un

20250306 RnsPay

20250306 PTM

20250305 1inch Fusion V1 Settlement

20250304 Pump

20250227

20250226 HenloKart

20250224 IN

20250223 HegicOptions

20250222 Un

20250221 StepHeroNFTs

20250221 Bybit

20250215 un

20250211 Scorch

20250211 LimitOrderProtocol

20250211 FourMeme

20250208 GMT7

20250208 Peapods Finance

20250201 GoldReserve

20250128 MCAI

20250126 AIXBTForcedSwap

20250123 ODOS

20250121 Ast

20250118 Paribus

20250114 IdolsNFT

20250113 Mosca2

20250112 Unilend

20250111 RoulettePotV2

20250110 JPulsepot

20250108 HORS

20250108 LPMine

20250107 IPC

20250106 Mosca

20250104 SorStaking

20250104 98#Token

20250101 LAURAToken

</details>

20241227 Bizness

20241223 Moonhacker

20241218 Slurpy

20241216 BTC24H

20241214 JHY

20241210 LABUBUToken

20241210 CloberDEX

20241203 Pledge

20241126 NFTG

20241124 Proxy_b7e1

20241123 Ak1111

20241121 Matez

20241120 MainnetSettler

20241119 PolterFinance

20241117 MFT

20241114 vETH

20241111 DeltaPrime

20241109 X319

20241107 ChiSale

20241107 CoW

20241107 UniV2

20241105 RPP

20241029 BUBAI

20241026 CompoundFork

20241022 Erc20transfer

20241022 VISTA

20241013 MorphoBlue

20241011 P719Token

20241006 HYDT

20241006 SASHAToken

20241005 AIZPTToken

20241002 La

20241001 FireToken

20240926 OnyxDAO

20240926 Bedrock_DeFi

20240924 MARA

20240923 PestoToken

20240923 Bankroll_Network

20240920 DOGGO

20240920 Shezmu

20240918 Un

20240915 WXETA

20240913 Un

20240913 OTSeaStaking

20240912 Un

20240911 INUMI

20240911 INUMI_db27

20240911 AIRBTC

20240910 Caterpillar_Coin_CUT

20240905 Un

20240905 PLN

20240905 HANAToken

20240904 Un

20240903 Penpiexyz_io

20240902 Pythia

20240828 Un

20240828 AAVE

20240820 COCO

20240816 Zenterest

20240816 OMPxContract

20240814 YodlRouter

20240813 VOW

20240812 iVest

20240806 Novax

20240801 Con

20240724 Spectra_finance

20240723 ME

20240716 Lifiprotocol

20240714 Minterest

20240712 DoughFina

20240711 SBT

20240711 GAX

20240708 LW

20240705 DeFiPlaza

20240703 Un

20240702 MRP

20240628 Will

20240627 APEMAGA

20240618 INcufi

20240617 Dyson_money

20240616 WIFCOIN_ETH

20240611 Crb2

20240611 JokInTheBox

20240610 UwuLend - Price Manipulation

20240610 Bazaar

20240608 YYStoken

20240606 SteamSwap

20240606 MineSTM

20240604 NCD

20240601

20240531 Liquiditytokens

20240531 MixedSwapRouter

20240529 SCROLL

20240529 MetaDragon

20240528 Tradeonorion

20240528 EXcommunity

20240527 RedKeysCoin

20240526 NORMIE

20240522 Burner

20240516 TCH

20240514 Sonne Finance

20240514 PredyFinance

20240512 TGC

20240510 GFOX

20240510 TSURU

20240508 GPU

20240507 SATURN

20240506 OSN

20240430 Yield

20240430 PikeFinance

20240427 BNBX

20240425 NGFS

20240424 XBridge

20240424 YIEDL

20240422 Z123

20240420 Rico

20240419 HedgeyFinance

20240417 Un

20240416 SATX

20240416 MARS_DEFI

20240415 GFA

20240415 ChaingeFinance

20240414 Hackathon

20240412 FIL314

20240412 SumerMoney

20240412 GROKD

20240410 BigBangSwap

20240409 UPS

20240408 SQUID

20240404 WSM

20240402 HoppyFrogERC

20240401 ATM

20240401 OpenLe

20240329 ETHFIN

20240329 PrismaFi

20240328 La

20240325 ZongZi

20240324 ARK

20240323 CGT

20240321 SSS

20240320 Paraswap

20240314 MO

20240313 IT

20240312 BBT

20240311 Binemon

20240309 Juice

20240309 UnizenIO

20240307 GHT

20240306 ALP

20240306 TGBS

20240305 Woofi

20240228 Seneca

20240228 SMOOFSStaking

20240223 Zoomer

20240223 CompoundUni

20240223 BlueberryProtocol

20240222 SwarmMarkets

20240221 DeezNutz404

20240221 GAIN

20240220 EGGX

20240219 RuggedArt

20240216 ParticleTrade

20240215 DualPools

20240215 Babyloogn

20240215 Miner

20240213 MINER BSC

20240211 Game

20240210 FILX DN404

20240208 Pandora404

20240205 BurnsDefi

20240202 ADC

20240201 AffineDeFi

20240130 XSIJ

20240130 MIMSpell

20240129 PeapodsFinance

20240128 BarleyFinance

20240127 CitadelFinance

20240125 NBLGAME

20240122 DAO_SoulMate

20240117 BmiZapper

20240117 SocketGateway

20240115 Shell_ME

20240112 WiseLending

20240110 Freedom

20240110 LQDX Alert

20240104 Gamma

20240102 MIC

20240102 RadiantCapital

20240101 OrbitChain

</details>

20231231 Channels BUSD&USDC

20231230 ChannelsFinance

20231228 CCV

20231228 DominoTT

20231225 Telcoin

20231222 PineProtocol

20231220 TransitFinance

20231217 Bob

20231217 FloorProtocol

20231216 GoodDollar

20231216 KEST

20231216 NFTTrader

20231214 PHIL

20231213 HYPR

20231211 GoodCompound

20231209 BCT

20231207 HNet

20231206 TIME

20231206 ElephantStatus

20231205 MAMO

20231205 BEARNDAO

20231202 bZxProtocol

20231201 Un

20231130 EEE

20231130 CAROLProtocol

20231129 Burntbubba

20231129 AIS

20231128 FiberRouter

20231125 MetaLend

20231125 TheNFTV2

20231122 KyberSwap

20231117 Token8633_9419

20231117 ShibaToken

20231116 WECO

20231115 EHX

20231115 XAI

20231115 LinkDAO

20231114 OKC Project

20231112 ME

20231111 Mahalend

20231110 Raft_fi

20231110 GrokToken

20231107 RBalancer

20231107 MEVbot

20231106 TrustPad

20231106 TheStandard_io

20231106 KR

20231102 BRAND

20231102 3913Token

20231101 SwampFinance

20231101 OnyxProtocol

20231031 UniBotRouter

20231030 LaEeb

20231028 AstridProtocol

20231024 MaestroRouter2

20231022 OpenLe

20231019 kTAF

20231018 HopeLend

20231018 MicDao

20231013 BelugaDex

20231013 WiseLending

20231012 Platypus

20231011 BH

20231008 ZS

20231008 pSeudoEth

20231007 StarsArena

20231005 DePayRouter

20230930 FireBirdPair

20230929 DEXRouter

20230926 XSDWETHpool

20230924 KubSplit

20230921 CEXISWAP

20230916 uniclyNFT

20230911 0x0DEX

20230909 BFCToken

20230908 APIG

20230907 HCT

20230905 QuantumWN

20230905 JumpFarm

20230905 Hea

20230905 FloorDAO

20230902 DAppSocial

20230829 EAC

20230827 Balancer

20230826 SVT

20230824 GSS

20230821 EHIVE

20230819 BTC20

20230818 ExactlyProtocol

20230814 ZunamiProtocol

20230809 EarningFram

20230802 Cur

20230802 Uwerx

20230801 NeutraFinance

20230801 LeetSwap

20230731 GYMNET

20230730 Curve

20230726 Carson

20230724 Palmswap

20230723 MintoFinance

20230722 ConicFinance02

20230721 ConicFinance

20230721 SUT

20230720 Utopia

20230720 FFIST

20230718 APEDAO

20230718 BNO

20230717 NewFi

20230715 USDTStakingContract28

20230712 Platypus

20230712 WGPT

20230711 RodeoFinance

20230711 Libertify

20230710 ArcadiaFi

20230708 CIVNFT

20230708 Civfund

20230707 LUSD

20230704 BambooIA

20230704 BaoCommunity

20230703 AzukiDAO

20230630 Biswap

20230630 MyAi

20230628 Themis

20230627 Un

20230627 STRAC

20230623 SHIDO

20230621 BabyDogeCoin02

20230621 BUNN

20230620 MIM

20230619 Contract_0x7657

20230618 ARA

20230617 MidasCapitalXYZ

20230617 Pawnfi

20230615 CFC

20230615 DEPUSDT_LEVUSDC

20230612 Sturdy Finance

20230611 SellToken04

20230607 CompounderFinance

20230606 VINU

20230606 UN

20230602 NST SimpleSwap

20230601 DDCoin

20230601 Cellframenet

20230531 ERC20TokenBank

20230529 Jimbo

20230529 BabyDogeCoin

20230529 FAPEN

20230529 NOON_NO

20230525 GPT

20230524 LocalTrade

20230524 CS

20230523 LFI

20230514 landNFT

20230514 SellToken03

20230513 Bitpaidio

20230513 SellToken02

20230512 LW

20230511 SellToken01

20230510 SNK

20230509 MCC

20230509 HODL

20230506 Melo

20230505 DEI

20230503 Ne

20230502 Level

20230428 0vix

20230427 SiloFinance

20230424 Axioma

20230419 OLIFE

20230416 Swapos V2

20230415 HundredFinance

20230413 yearnFinance

20230412 MetaPoint

20230411 Paribus

20230409 SushiSwap

20230405 Sentiment

20230402 Allbridge

20230328 SafeMoon Hack

20230328 THENA

20230325 DBW

20230322 BIGFI

20230317 ParaSpace NFT

20230315 Poolz

20230313 EulerFinance

20230308 DKP

20230307 Phoenix

20230227 LaunchZone

20230227 SwapX

20230224 EFVault

20230222 DYNA

20230218 Re

20230217 Starlink

20230217 Dexible

20230217 Platypusdefi

20230210 Sheep Token

20230210 dForce

20230207 CowSwap

20230206 FDP Token

20230203 Orion Protocol

20230203 Spherax USDs

20230202 BonqDAO

20230130 BEVO

20230126 TomInu Token

20230119 SHOCO Token

20230119 ThoreumFinance

20230118 QTN Token

20230118 UPS Token

20230117 OmniEstate

20230116 MidasCapital

20230111 UFDao

20230111 ROE

20230110 BRA

20230103 GDS

</details>

20221230 DFS

20221229 JAY

20221225 Rubic

20221223 Defrost

20221214 Nmbplatform

20221214 FPR

20221213 ElasticSwap

20221212 BGLD

20221211 Lodestar

20221211 ME

20221210 MUMUG

20221210 TIFIToken

20221209 NO

20221207 AES

20221205 RFB

20221205 BBOX

20221202 O

20221201 APC

20221129 MBC & ZZSH

20221129 SEAMAN

20221123 NUM

20221122 AUR

20221121 SDAO

20221119 AnnexFinance

20221118 Polynomial

20221117 UEarnPool

20221116 SheepFarm

20221110 DFXFinance

20221109 brahTOPG

20221108 ME

20221108 Kashi

20221107 MooCAKECTX

20221105 BDEX

20221027 VTF

20221027 Team Finance

20221026 N00d Token

20221025 ULME

20221024 Market

20221024 MulticallWithoutCheck

20221021 OlympusDAO

20221020 HEALTH Token

20221019 BEGO Token

20221018 HPAY

20221018 PLTD Token

20221017 Uerii Token

20221014 INUKO Token

20221014 EFLe

20221014 MEVBOT a47b

20221012 ATK

20221011 Rabby Wallet SwapRouter

20221011 Templedao

20221010 Carrot

20221009 Xa

20221006 RES-Token

20221002 Transit Swap

20221001 BabySwap

20221001 RL

20221001 Thunder Brawl

20220929 BXH

20220928 MEVBOT Badc0de

20220923 RADT-DAO

20220913 MevBot Private TX

20220909 DPC

20220908 YYDS

20220908 NewFreeDAO

20220908 Ragnarok Online In

20220906 NXUSD

20220905 ZoomproFinance

20220902 ShadowFi

20220902 Bad Guys by RPF

20220828 DDC

20220824 LuckyTiger NFT

20220816 Circle_2

20220813 Circle

20220810 XSTABLE Protocol

20220809 ANCH

20220807 EGD Finance

20220804 EtnProduct

20220803 Qixi

20220802 Nomad Bridge

20220801 Reaper Farm

20220725 LPC

20220723 Audius

20220713 SpaceGodzilla

20220710 Omni NFT

20220706 FlippazOne NFT

20220701 Quixotic - Optimism NFT Marketplace

20220626 XCarnival

20220624 Harmony's Horizon Bridge

20220618 SNOOD

20220616 In

20220608 GYMNetwork

20220608 Optimism - Wintermute

20220606 Discover

20220529 NO

20220524 HackDao

20220517 ApeCoin

20220508 Fortress Loans

20220430 Saddle Finance

20220430 Rari Capital/Fei Protocol

20220428 DEUS DAO

20220424 Wiener DOGE

20220423 Akutar NFT

20220421 Zeed Finance

20220416 BeanstalkFarms

20220415 Rikkei Finance

20220412 ElephantMoney

20220411 Creat Future

20220409 GYMNetwork

20220329 Ronin Network

20220329 Redacted Cartel

20220327 Revest Finance

20220326 Auctus

20220322 CompoundTUSDSweepTokenBypass

20220321 OneRing Finance

20220320 LI.FI

20220320 Umbrella Network

20220315 Aga

20220315 Hundred Finance

20220313 Paraluni

20220309 Fantasm Finance

20220305 Bacon Protocol

20220303 TreasureDAO

20220214 BuildFinance - DAO

20220208 Sandbox LAND

20220205 Meter

20220204 TecraSpace

20220128 Qubit Finance

20220118 Multichain (Anyswap)

</details>
<details> <summary> 2021 </summary>

20211221 Visor Finance

20211218 Grim Finance

20211214 Ner

20211130 MonoX Finance

20211123 Ploutoz Finance

20211027 Cream Finance

20211015 Indexed Finance

20210916 SushiSwap Miso

20210915 Nimbus Platform

20210915 NowSwap Platform

20210912 ZABU Finance

20210903 DAO Maker

20210830 Cream Finance

20210817 XSURGE

20210811 Poly Network

20210804 WaultFinance

20210804 Popsicle

20210728 Le Finance

20210710 Chainswap

20210702 Chainswap

20210628 SafeDollar

20210625 xWin Finance

20210622 Ele

20210607 88mph NFT

20210603 PancakeHunny

20210527 JulSwap

20210527 BurgerSwap

20210519 PancakeBunny

20210516 bEarn

20210508 Rari Capital

20210508 Value Defi

20210502 Spartan

20210428 Uranium

20210308 DODO

20210305 Paid Network

20210204 Yearn YDai

20210125 Sushi Badger Digg

</details>
<details> <summary> Before 2020 </summary>

20201229 Co

20201121 Pickle Finance

20201026 Harvest Finance

20200912 bzx

20200804 Opyn Protocol

20200628 Balancer Protocol

20200618 Bancor Protocol

20200419 LendfMe

20200418 UniSwapV1

20181007 SpankChain

20180424 SmartMesh

20180422 Beauty Chain

20171106 Parity - 'Accidentally Killed It'

20170719 Parity Multisig

</details>

---

Transaction debugging tools

Ethereum Signature Database

4byte | sig db | etherface

Useful tools

ABI to interface | Get ABI for un contracts | ETH Calldata Decoder | ETHCMD - Guess ABI | Abi tools

Hacks Dashboard

---

List of DeFi Hacks & POCs

20261003 MALT - the MALT/DAI sLP runs its below-peg price recovery inside swap() before sending the output, pulling DAI from the Capital 源码 treasury into the pool, then checks its constant-product in against the final balances without separating the injected treasury DAI from the caller's own input, so a negligible 1 DAI swap is credited with thousands of injected DAI and releases a disproportionate MALT output

Lost: 13,440.1517594 DAI net profit to the attacker (exactly reproduced) on Polygon; the Capital 源码 treasury was drained of 12,744.9136718 DAI across two below-peg rebalance injections, the attacker paying just 1 DAI per exploit swap and arbitraging the extracted MALT out on QuickSwap - the ~$72K figure in the original alert does not match the on-chain reconstruction

#### Contract
MALT_exp.sol

20261002 GoldPesa - the GPX V4 hook rebalances 协议 liquidity inside beforeSwap via a burn and TAKE_PAIR that run in the attacker's own open PoolManager unlock, and ne the PositionManager deltas are settled first, so an unsettled mint debt parked in the same unlock nets against the hook's burn credit and the attacker walks the freed USDC out

Lost: 114,999.999186 USDC (exactly reproduced) on Base; the GPX/USDC V4 pool's 协议 liquidity was burned by the hook's own hourly rebalance, and its 148,868.602188 USDC burn credit was split by the shared-unlock delta bug - 33,868.603002 USDC reached the hook while 114,999.999186 USDC paid off the attacker's unsettled mint debt and then exited to the attacker, funded by a 175,000 USDC Morpho flash loan repaid in the same tx

#### Contract
GoldPesa_exp.sol

20261001 FlashLoopAdapter - a Safe module authenticates its caller by asking that caller whether the module is enabled (self-attestation) and then makes an unconstrained call to a caller-supplied router, letting a fake Safe drive the adapter into draining real Safes that enabled it

Lost: 114.096151 WETH (~$305k, exactly reproduced) on Ethereum; two Safes that enabled the module as a were emptied - Safe #1 lost 1306.48 weETH of Aa once its 1335.26 WETH debt was repaid, Safe #2 lost 6.426 weETH, all swapped to WETH via ODOS for the attacker's net

#### Contract
FlashLoopAdapter_exp.sol

20260930 SKYDAO - sell-path controller burns the pair's SKYDAO and syncs before the net sell is credited, latching a near-zero reserve that a direct pair.swap drains for the pair's entire USDT

Lost: 59,914.12 USDT net to the attacker (exactly reproduced) on BNB Chain; the SKYDAO/USDT PancakeSwap V2 pair lost its entire 183,482.88 USDT reser by a direct pair.swap against the reserve the sell-path burn+sync latched to ~0

#### Contract
SKYDAO_exp.sol

20260930 PositionManager - deposit the vault's existing USDT at the manipulable PancakeSwap V3 spot price, so crashing the spot before depositing mints inflated shares that withdraw redeems in the same transaction

Lost: 32,080.604282 USDT (exactly reproduced) on BNB Chain; one atomic tx crashed the USDT/BTCB spot with an 8,000,000 USDT swap, then ran 24 deposit(1,000,000 USDT)/withdraw cycles to 盗取 the vault's own PancakeSwap V3 position, the pool losing 32,096.098596 USDT

#### Contract
PositionManager_exp.sol

20260930 MUS - deposit refunds a first-deposit bonus and also credits it as withdrawable allocation, so a single deposit-withdraw from a fresh address returns more ETH than deposited

Lost: ~0.400168 ETH per deposit-withdraw cycle (exactly reproduced) on Ethereum; the MUS pool's standing 5.335 ETH was drained to 0 across the attack block, reported campaign total ~$36.9k across many fresh addresses

#### Contract
MUS_exp.sol

20260929 LPBonus - reser between reward accrual and LP withdrawal lets a manipulated MSN reser an LP reward claim

Lost: ~92,607 USDT (~$92.6k) on BNB Chain; one LP position claimed 1,442,165.713011 FIST against an accrual that funded ~940,041.612768 FIST, extracted by flash-swapping the MSN reserve down at accrual and back up at withdrawal

#### Contract
LPBonus_exp.sol

20260926 DAOstack - permissionless newOrganization lets an attacker hijack an existing Reputation contract and 盗取 the Avatar

Lost: 4.025 ETH (full Genesis Alpha treasury); attacker minted 20,000 REP against the 's real Reputation contract (supply 9,738.6 to 29,738.6, ~67% majority after a 200 REP GenesisProtocol burn) and used it to self-install as a full-permission scheme

#### Contract
DAOstack_exp.sol

20260923 Pancake - Signed Swap Delta Accounting Error

Lost: ~1.6488688845 BNB (~$1.3K)

#### Contract
Pancake.sol

Link reference

---

20260921 DoinGud - acceptOffer replay offer cleanup on the amount=0 path

Lost: 35,380.154566 USDC net (two byte-identical acceptOffer calls each paid out 35,486.935717 USDC from escrow; funded via a UniV2 flash swap, repaid 35,593.716868 USDC)

#### Contract
DoinGud_exp.sol

20260921 GaslessReser - erc20WithTransfersAndExecute lets a whitelisted module run un transferFrom calldata

Lost: 8.72 WETH (~$23.8K) across 466 with standing approvals to the Enabler; PoC reproduces 3 , 2.3546 WETH (~$6.4K, ~27% of the WETH-leg loss)

#### Contract
GaslessReser.sol

20260921 InternetToken - permissionless swapV3 with caller-supplied pool lets a fake callback mint INT arbitrarily

Lost: 764,145,702 INT + 5.846988 WETH (attacker minted 925.41M INT total, dumped 161.27M into the real INT/WETH pool for the WETH, reproduced to the wei)

#### Contract
InternetToken_exp.sol

20260918 Likwid - missing pairDelta update in le=0 margin borrow freezes AMM quote

Lost: 74.31 BNB (reproduced to within 3 wei)

#### Contract
Likwid_exp.sol

20260916 Startale - transient storage init flag outlives the constructor and lets anyone reinitialize an ERC7579 account and 盗取 it

Lost: 427.551160 USDC drained in this batch tx (32.555561 USDC reproduced across 3 of 23 accounts; ~$2,876 USDC+USDT aggregate across 41 known batches)

#### Contract
Startale_exp.sol

20260916 Flamincome - permissionless Con inflates Strategy NAV and lets o on withdrawAll

Lost: ~$345.9K USDT net attacker profit (gross Strategy loss ~$595K in aUSDT+USDT)

#### Contract
Flamincome_exp.sol

20260916 PrimeFinance - permissionless stale signed oracle report o drains lending pool

Lost: ~425.5 WHYPE (~$33.4K) drained from the lending pool reserve

#### Contract
PrimeFinance_exp.sol

20260916 Nimiq - GSN forwarder skips signature check, relying solely on attacker-chosen paymaster

Lost: ~$50,463.79 (USDC, USDT0, USDC.e drained from a swap-liquidity 钱包's standing approvals)

#### Contract
Nimiq_exp.sol

20260915 RsETHSafeModule - nested self-referential multicall authorization bypass drains Gnosis Safe

Lost: 2,900 aEthrsETH (~$7.8M gross; 2,882.37 rsETH / ~$7.73M net to the ME)

#### Contract
RsETHSafeModule_exp.sol

20260915 BonfireSwap - missing caller authorization lets anyone force-sell any appro's tokens

Lost: ~66 BNB (~$47-50K); 58.78 BNB reproduced from a 5- subset (~98.7% of tokens drained)

#### Contract
BonfireSwap_exp.sol

20260912 SpiralHookV2 - Uniswap V4 spot-price borrow plus tx.origin-keyed same-block guard bypass

Lost: ~10.70728 ETH (reproduced exact to the wei)

#### Contract
SpiralHook.sol

20260912 YamFinance - dormant-DAO quorum go takeo legacy UMA farming contracts

Lost: ~$121K (48.085 WETH + 763.101 UMA)

#### Contract
YamFinance_exp.sol

20260911 ORB - le pool buyout + refund-before-sell reentrancy drains burnLP-depleted reserve

Lost: ~44.9-45 BNB (~$32,610.72)

#### Contract
ORB_exp.sol

20260911 GDC - chained EOA bypass, liquidity misclassification, burn mismatch, and reentrant tax-free exit

Lost: ~35.34 BNB (35.6986490 BNB reproduced exact to the wei)

#### Contract
GDC_exp.sol

20260909 EtherFiAtomicQueue - missing sol control drains allowances

Lost: ~15.45 ETH (9 real ' standing liquidETH allowances drained)

#### Contract
EtherFiAtomicQueue_exp.sol

20260909 OMNI404 - ERC-404 dual ID/amount transfer interpretation drains pool WETH

Lost: 2.427 WETH (run() leg reproduced here; ~3.02 ETH across the full 4-tx block)

#### Contract
OMNI404_exp.sol

20260909 UnifiProtocol - unregistered caller-supplied pool trusted for reward eligibility and math

Lost: ~5.86 BNB (treasury still holds ~9.17 BNB, contract unpaused — bug remains re-exploitable)

#### Contract
UnifiProtocol_exp.sol

20260909 BeatXswap - slot0 spot-price oracle with no TWAP guard drains BTX reserves

Lost: ~$63.7K USDT net profit (2,984,557 BTX / ~$77.5K drained from two reserves)

#### Contract
BeatXswap_exp.sol

20260909 EnsoFinance - short-window Uniswap V3 TWAP oracle enables ~9x o strategy deposit

Lost: ~5.6 ETH (5.277 ETH realized in this PoC after slippage selling looted UNI/AAVE/MKR back to WETH)

#### Contract
EnsoFinance_exp.sol

20260909 ZentraFinance - aToken burn safeguard clamps to zero, repayWithATokens clears debt without burning

Lost: ~140,000 ctUSD + 30 USDC.e (~$143K)

#### Contract
ZentraFinance_exp.sol

20260908 OrderFactory - missing access control on createOrderForBuyer drains buyer accounts

Lost: ~20.247 ETH this tx (5 buyers drained; reported incident total ~24.7 ETH)

#### Contract
OrderFactory_exp.sol

20260907 RouterDrain - permissionless swap entry lets a fake V3 pool abuse router allowances

Lost: ~62.28 WBNB across 29 (3 reconstructed here: OCEAN, Kandura, SATURN)

#### Contract
RouterDrain_exp.sol

20260907 CozyFinance - un UMA Optimistic Oracle trigger enables unbacked protection-token redemption

Lost: ~160,776 USDC.e (~$160K)

#### Contract
CozyFinance_exp.sol

20260905 DHC - repeatable claim due to missing claimed-flag

Lost: ~$71.8K USDT

#### Contract
DHC_exp.sol

20260905 Reddio - cross-share-class balance double-count registerErc20

Lost: ~9.25 ETH

#### Contract
Reddio_exp.sol

20260905 SecuredFi - same-block self-trade manipulates getMarketUnitPrice to fabricate collateral

Lost: ~0.9 WBTC (~$72K single-drain; ~$104K across all actors exploiting the same public bug)

#### Contract
SecuredFi_exp.sol

20260903 NotionalFinance - ERC1155 fCash mint o drains escrow

Lost: ~69,257.37 DAI + ~1,658,524.86 USDC (~$1.73M)

#### Contract
NotionalFinance_exp.sol

20260901 ReflexerGEB - Shared GebProxyActions library registered as SAFE owner

Lost: ~5.9436 ETH (~$14K, drained from 4 SAFEs in one tx: IDs 3, 5, 8, 18)

#### Contract
ReflexerGEB_exp.sol

20260831 FloatProtocol - Uniswap V3 spot price manipulation of Hypervisor LP shares

Lost: ~$28,000 (10.71 ETH)

#### Contract
FloatProtocol_exp.sol

20260831 Balancer - joinswapPoolAmountOut rounding 盗取 across 5 pools

Lost: ~$110,839 for this DPI/USDC/WETH/WBTC pool (~$234K aggregate across all 5 pools)

#### Contract
Balancer.sol

20260828 AjnaFinance - liquidation accounting manipulation auction

Lost: ~$124.8K for this cbETH pool (1 of 7 pools hit by the same bug the same day, ~$775K aggregate)

#### Contract
AjnaFinance_exp.sol

20260827 CashCowCoin - pri burn + premature sync() drains PancakeSwap pair

Lost: ~165.47 WBNB (~$117.4K)

#### Contract
CashCowCoin_exp.sol

20260826 EnjinCryptoItems - unprotected registry reinitialization, manager takeover

Lost: 5,231,353 ENJ (~$142K)

#### Contract
EnjinCryptoItems_exp.sol

20260825 FHToken - sell-tax reser sync()

Lost: 19,999.0530404 USDT (~$20K)

#### Contract
FHToken_exp.sol

20260823 ArrakisGUNI - Uniswap V3 spot-price manipulation of vault mint/burn

Lost: ~2.9414 ETH net attacker surplus (Arrakis V1 / G-UNI ENS-WETH vault)

#### Contract
ArrakisGUNI_exp.sol

20260823 TermFinance - Go capture Aragon power

Lost: 2,841.1701401 WETH (attacker net gain, ETH meta-vault)

#### Contract
TermFinance_exp.sol

20260822 SandboxOFT - LayerZero delegate hijack

Lost: 10,000,000 SAND minted unbacked (~$517,170 face value, one of 400+ repeated txs in an ongoing campaign)

#### Contract
SandboxOFT_exp.sol

20260819 AllbridgeCCTP - Phantom deposit message attestation

Lost: ~189,751.554381 USDC

#### Contract
AllbridgeCCTP_exp.sol

20260809 USM - defund() price split-in rounding exploit

Lost: ~70.83 ETH

#### Contract
USM_exp.sol

20260806 UnistreetLaunchpad - arbitrary call injection launch forwarding

Lost: ~17,743.91 USDC + ~0.0072 WETH (~$17.75K)

#### Contract
UnistreetLaunchpad_exp.sol

20260805 StrongBlock - go takeover of an abandoned Go

Lost: 32,695.761681 STRONG + 383,447.167299 STRNGR (~$72K)

#### Contract
StrongBlock_exp.sol

Link reference

20260617 Aztec V1 - escapeHatch Proof-Forgery (permissionless RollupProcessor exit)

Lost: ~$2.2M (1158 ETH + 150,000 DAI + 0.4696 renBTC)

Link reference

20260526 SKP Token - Deliberately Engineered 盗取 (Insider Exploit / Rug Pull)

Lost ~$212,195 USDT

Classification: Premeditated insider exploit — NOT a con external hack.

#### Contract
SKP_exp2.sol

Link reference

---

20260525 SquidRouterModule - Missing caller check

Lost: 0.25 WBTC + 0.29 wTAO + 0.02 WETH

#### Contract
SquidRouterModule_exp.sol

Link reference

Link reference

/3040

---

20260518 TesseraSwap - Callback Repayment Price Spread

Lost: ~$20K

#### Contract
TesseraSwap_exp.sol

Link reference

Link reference

20260412 SubQuerySettings - Settings access control

Lost: 218.07M SQT

#### Contract
SubQuerySettings_exp.sol

Link reference

/2909

---

20260407 SquidMulticallAllowanceDrain - Arbitrary Call / Wrong Approval

---

20260324 Uni - Logic Error

Lost: 57K USD

#### Contract
Uni.sol

Link reference

---

20260323 BCE - Deflationary Token Logic Error

Lost: ~800,000 USDT

#### Contract
bce_exp.sol

Link reference

/2814

---

20260319 ATMBlindBox - Weak Randomness / Predictable RNG

Lost: 99K USD

#### Contract
ATMBlindBox_exp.sol

Link reference

View Gas Reports

Foundry also has the ability to report the gas used per function call which mimics the behavior of hardhat-gas-reporter. Generally speaking if gas costs per function call is very high, then the likelihood of its success is reduced. Gas optimization is an important activity done by smart contract de.

Every poc in this repository can produce a gas report like this:

For Example:
Let us find out the gas used in the Audius poc

Execution

_Demo_

![](./AudiusPocGasReport.gif)

Bug Reproduce

Moved to DeFi

FlashLoan Testing

Moved to DeFiLabs

License

This project is licensed under the Apache License 2.0.

项目信息

开发语言：Solidity

Star 数：6804

技术要点

该项目属于黑客技术方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Reproduce DeFi hacked incidents using Foundry.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。

登录后才能参与讨论

下载链接

会员才能下载

登录后开通会员

同分类推荐

暂无同类资源

资源标题	DeFiHackLabs - Reproduce DeFi hacked incidents using Foundry.
所属分类	黑客技术
发布作者	admin
发布时间	2026-10-05 22:29:56
下载权限	免费下载
附件数量	2 个下载链接
浏览次数	306
讨论数量	0
主题状态	正常讨论中

DeFiHackLabs - Reproduce DeFi hacked incidents using Foundry.

项目说明

DeFi Hacks Reproduce - Foundry

Table of Contents

Getting Started

Web3 Cybersecurity Academy

OnChain transaction debugging

Donate us

List of Past DeFi Incidents

Transaction debugging tools

Ethereum Signature Database

Useful tools

Hacks Dashboard

List of DeFi Hacks & POCs

20261001 FlashLoopAdapter - a Safe module authenticates its caller by asking that caller whether the module is enabled (self-attestation) and then makes an unconstrained call to a caller-supplied router, letting a fake Safe drive the adapter into draining real Safes that enabled it

Lost: 114.096151 WETH (~$305k, exactly reproduced) on Ethereum; two Safes that enabled the module as a were emptied - Safe #1 lost 1306.48 weETH of Aa once its 1335.26 WETH debt was repaid, Safe #2 lost 6.426 weETH, all swapped to WETH via ODOS for the attacker's net

20260930 SKYDAO - sell-path controller burns the pair's SKYDAO and syncs before the net sell is credited, latching a near-zero reserve that a direct pair.swap drains for the pair's entire USDT

Lost: 59,914.12 USDT net to the attacker (exactly reproduced) on BNB Chain; the SKYDAO/USDT PancakeSwap V2 pair lost its entire 183,482.88 USDT reser by a direct pair.swap against the reserve the sell-path burn+sync latched to ~0

20260930 PositionManager - deposit the vault's existing USDT at the manipulable PancakeSwap V3 spot price, so crashing the spot before depositing mints inflated shares that withdraw redeems in the same transaction

Lost: 32,080.604282 USDT (exactly reproduced) on BNB Chain; one atomic tx crashed the USDT/BTCB spot with an 8,000,000 USDT swap, then ran 24 deposit(1,000,000 USDT)/withdraw cycles to 盗取 the vault's own PancakeSwap V3 position, the pool losing 32,096.098596 USDT

20260930 MUS - deposit refunds a first-deposit bonus and also credits it as withdrawable allocation, so a single deposit-withdraw from a fresh address returns more ETH than deposited

Lost: ~0.400168 ETH per deposit-withdraw cycle (exactly reproduced) on Ethereum; the MUS pool's standing 5.335 ETH was drained to 0 across the attack block, reported campaign total ~$36.9k across many fresh addresses

20260929 LPBonus - reser between reward accrual and LP withdrawal lets a manipulated MSN reser an LP reward claim

Lost: ~92,607 USDT (~$92.6k) on BNB Chain; one LP position claimed 1,442,165.713011 FIST against an accrual that funded ~940,041.612768 FIST, extracted by flash-swapping the MSN reserve down at accrual and back up at withdrawal

20260926 DAOstack - permissionless newOrganization lets an attacker hijack an existing Reputation contract and 盗取 the Avatar

Lost: 4.025 ETH (full Genesis Alpha treasury); attacker minted 20,000 REP against the 's real Reputation contract (supply 9,738.6 to 29,738.6, ~67% majority after a 200 REP GenesisProtocol burn) and used it to self-install as a full-permission scheme

20260923 Pancake - Signed Swap Delta Accounting Error

Lost: ~1.6488688845 BNB (~$1.3K)

Link reference

20260921 DoinGud - acceptOffer replay offer cleanup on the amount=0 path

Lost: 35,380.154566 USDC net (two byte-identical acceptOffer calls each paid out 35,486.935717 USDC from escrow; funded via a UniV2 flash swap, repaid 35,593.716868 USDC)

20260921 GaslessReser - erc20WithTransfersAndExecute lets a whitelisted module run un transferFrom calldata

Lost: 8.72 WETH (~$23.8K) across 466 with standing approvals to the Enabler; PoC reproduces 3 , 2.3546 WETH (~$6.4K, ~27% of the WETH-leg loss)

20260921 InternetToken - permissionless swapV3 with caller-supplied pool lets a fake callback mint INT arbitrarily

Lost: 764,145,702 INT + 5.846988 WETH (attacker minted 925.41M INT total, dumped 161.27M into the real INT/WETH pool for the WETH, reproduced to the wei)

20260918 Likwid - missing pairDelta update in le=0 margin borrow freezes AMM quote

Lost: 74.31 BNB (reproduced to within 3 wei)

20260916 Startale - transient storage init flag outlives the constructor and lets anyone reinitialize an ERC7579 account and 盗取 it

Lost: 427.551160 USDC drained in this batch tx (32.555561 USDC reproduced across 3 of 23 accounts; ~$2,876 USDC+USDT aggregate across 41 known batches)

20260916 Flamincome - permissionless Con inflates Strategy NAV and lets o on withdrawAll

Lost: ~$345.9K USDT net attacker profit (gross Strategy loss ~$595K in aUSDT+USDT)

20260916 PrimeFinance - permissionless stale signed oracle report o drains lending pool

Lost: ~425.5 WHYPE (~$33.4K) drained from the lending pool reserve

20260916 Nimiq - GSN forwarder skips signature check, relying solely on attacker-chosen paymaster

Lost: ~$50,463.79 (USDC, USDT0, USDC.e drained from a swap-liquidity 钱包's standing approvals)

20260915 RsETHSafeModule - nested self-referential multicall authorization bypass drains Gnosis Safe

Lost: 2,900 aEthrsETH (~$7.8M gross; 2,882.37 rsETH / ~$7.73M net to the ME)

20260915 BonfireSwap - missing caller authorization lets anyone force-sell any appro's tokens

Lost: ~66 BNB (~$47-50K); 58.78 BNB reproduced from a 5- subset (~98.7% of tokens drained)

20260912 SpiralHookV2 - Uniswap V4 spot-price borrow plus tx.origin-keyed same-block guard bypass

Lost: ~10.70728 ETH (reproduced exact to the wei)

20260912 YamFinance - dormant-DAO quorum go takeo legacy UMA farming contracts

Lost: ~$121K (48.085 WETH + 763.101 UMA)

20260911 ORB - le pool buyout + refund-before-sell reentrancy drains burnLP-depleted reserve

Lost: ~44.9-45 BNB (~$32,610.72)

20260911 GDC - chained EOA bypass, liquidity misclassification, burn mismatch, and reentrant tax-free exit

Lost: ~35.34 BNB (35.6986490 BNB reproduced exact to the wei)

20260909 EtherFiAtomicQueue - missing sol control drains allowances

Lost: ~15.45 ETH (9 real ' standing liquidETH allowances drained)

20260909 OMNI404 - ERC-404 dual ID/amount transfer interpretation drains pool WETH

Lost: 2.427 WETH (run() leg reproduced here; ~3.02 ETH across the full 4-tx block)

20260909 UnifiProtocol - unregistered caller-supplied pool trusted for reward eligibility and math

Lost: ~5.86 BNB (treasury still holds ~9.17 BNB, contract unpaused — bug remains re-exploitable)

20260909 BeatXswap - slot0 spot-price oracle with no TWAP guard drains BTX reserves

Lost: ~$63.7K USDT net profit (2,984,557 BTX / ~$77.5K drained from two reserves)

20260909 EnsoFinance - short-window Uniswap V3 TWAP oracle enables ~9x o strategy deposit

Lost: ~5.6 ETH (5.277 ETH realized in this PoC after slippage selling looted UNI/AAVE/MKR back to WETH)

20260909 ZentraFinance - aToken burn safeguard clamps to zero, repayWithATokens clears debt without burning

Lost: ~140,000 ctUSD + 30 USDC.e (~$143K)

20260908 OrderFactory - missing access control on createOrderForBuyer drains buyer accounts

Lost: ~20.247 ETH this tx (5 buyers drained; reported incident total ~24.7 ETH)

20260907 RouterDrain - permissionless swap entry lets a fake V3 pool abuse router allowances

Lost: ~62.28 WBNB across 29 (3 reconstructed here: OCEAN, Kandura, SATURN)

20260907 CozyFinance - un UMA Optimistic Oracle trigger enables unbacked protection-token redemption

Lost: ~160,776 USDC.e (~$160K)

20260905 DHC - repeatable claim due to missing claimed-flag

Lost: ~$71.8K USDT

20260905 Reddio - cross-share-class balance double-count registerErc20

Lost: ~9.25 ETH

20260905 SecuredFi - same-block self-trade manipulates getMarketUnitPrice to fabricate collateral