- Amount Lost: $15,569.00
- Funds Returned: $0.00
- Category: Other
- Date: 2023-8-21
Quick Summary
EthereumHive project exploited, resulting in the loss of 744 million EHIVE tokens worth 15,569 USD (9.32 ETH).
Details of the Exploit
EthereumHive, a project running on the Ethereum chain, was exploited on August 21, 2023, through a reentrancy attack. The attacker used a rewarding issue in the EHIVE token's smart contract which allowed stakes with zero amount. They created multiple contracts and staked 0 EHIVE tokens from each of them. By calling stake and unstake immediately in each contract, the attacker increased reward amounts, ultimately minting 744 million EHIVE tokens. These tokens were exchanged for over 9 ETH, equivalent to 15,569 USD. The stolen funds were deposited into TornadoCash.
Block Data Reference
Attacker Address:
https://etherscan.io/address/0x0195448a9c4ADEaF27002C6051C949f3C3234bb5
Malicious Transactions:
https://etherscan.io/tx/0xad818ec910def08c70ac519ab0fffa084b4178014a91cd8aa2f882d972a511c1
https://etherscan.io/tx/0xd9156f507c701a09d3312e1987383c7c882df50b3127e1adfd74d74052642114
Malicious Contract Addresses:
https://etherscan.io/address/0x98C2e1E85F8bF737D9c1450dd26D4A4bf880B892
https://etherscan.io/address/0xE7d9a93541FA79D6ECF3DC5997632177146Dcb84
TornadoCash Deposit Transaction:
https://etherscan.io/tx/0x61bfbd48088f2f5236bc9eca991a53cd9199dc7a1bdfe1d17dbd1638d7af185d
Proof Links: