DeFi Security
Contracts and wallets
14 addresses stored for published incidents. Each shows how it was confirmed. Addresses that a source named but we did not check are marked as such.
- 0x0136fe…4ba8eccontractEtherscan ↗
KolanHook (affected)
Ethereum · Confirmed on-chain · KolanHook: an unbounded buyback settled at a manipulated spot price
- 0x16bb8b…1283d8contractEtherscan ↗
FlashLoopAdapter (affected)
Ethereum · Confirmed on-chain · FlashLoopAdapter: a spoofable caller check in a Safe module
- 0xa98f06…1b99f5contractEtherscan ↗
Vesting V2 manager on Ethereum (affected)
Ethereum · Confirmed on-chain · UNCX Vesting V2: share records and token balance made to disagree
- 0x01EB95…BdA5FAwalletEtherscan ↗
Attacker wallet (externally owned)
Ethereum · Confirmed on-chain · MakerDAO flip keeper: an unprotected function handed an attacker control of dormant auction winnings
- 0xEc997d…321dcFcontractEtherscan ↗
Attack helper contract
Ethereum · Confirmed on-chain · MakerDAO flip keeper: an unprotected function handed an attacker control of dormant auction winnings
- 0xf09a13…DCC170contractEtherscan ↗
Adapter contract holding rights over the keeper's Vat account
Ethereum · Confirmed on-chain · MakerDAO flip keeper: an unprotected function handed an attacker control of dormant auction winnings
- 0x9c05a0…0e8273contractEtherscan ↗
Dormant ETH-A keeper (EIP-1967 proxy), affected
Ethereum · Confirmed on-chain · MakerDAO flip keeper: an unprotected function handed an attacker control of dormant auction winnings
- 0x68399e…6A5546contractEtherscan ↗
Keeper implementation (source reported unverified)
Ethereum · Confirmed on-chain · MakerDAO flip keeper: an unprotected function handed an attacker control of dormant auction winnings
- 0xd8a04F…C15531contractEtherscan ↗
MakerDAO ETH-A Flipper (retired auction house)
Ethereum · Confirmed on-chain · MakerDAO flip keeper: an unprotected function handed an attacker control of dormant auction winnings
- 0x35D1b3…A0492BcontractEtherscan ↗
MakerDAO Vat (core accounting)
Ethereum · Confirmed on-chain · MakerDAO flip keeper: an unprotected function handed an attacker control of dormant auction winnings
- 0x2F0b23…6B042AcontractEtherscan ↗
MakerDAO ETH-A GemJoin (collateral exit)
Ethereum · Confirmed on-chain · MakerDAO flip keeper: an unprotected function handed an attacker control of dormant auction winnings
- 0xC02aaA…756Cc2contractEtherscan ↗
Wrapped Ether (WETH)
Ethereum · Confirmed on-chain · MakerDAO flip keeper: an unprotected function handed an attacker control of dormant auction winnings
- 0xd90e2f…24F31bcontractEtherscan ↗
Mixer router that received the proceeds
Ethereum · Confirmed on-chain · MakerDAO flip keeper: an unprotected function handed an attacker control of dormant auction winnings
- 0xaDC374…DaF073walletEtherscan ↗
Keeper owner and 2020 operator
Ethereum · Independent analysis · MakerDAO flip keeper: an unprotected function handed an attacker control of dormant auction winnings