FutureSwap on Arbitrum Hit by Reentrancy Attack, Losing $74,000

iconTechFlow
Share
Share IconShare IconShare IconShare IconShare IconShare IconCopy
AI summary iconSummary

expand icon
FutureSwap on Arbitrum fell victim to a reentrancy attack, losing around $74,000. The reentrancy attack unfolded in two steps: the attacker first minted excessive LP tokens during a liquidity event three days ago. After waiting, they burned the tokens to claim collateral and drained funds from the protocol. The exploit highlights risks on Arbitrum-based DeFi platforms.

According to monitoring by BlockSec Phalcon, the FutureSwap contract on the Arbitrum chain has been attacked again, with an estimated loss of around $74,000. This attack exploited a reentrancy vulnerability. The attacker executed a two-step process: first, they exploited the reentrancy vulnerability during a liquidity provision three days ago to mint an excessive amount of LP tokens; then, after waiting for three days, they burned these illegally minted LP tokens to redeem the underlying collateral assets, stealing funds from the protocol and realizing profits.

Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.