OceanAltOceanAlt

Security incident · 2021-04-28

Uranium Finance

According to the public DefiLlama incident dataset, Uranium Finance (BSC) suffered a security incident on 2021-04-28, with about $57.2M reported lost.

Date2021-04-28
Reported loss$57.2M
ChainBSC
Target typeDeFi Protocol
Technique classToken & Share Accounting
TechniqueArithmetic Error
Bridge incidentNo
Within 2021#15 by loss that year, 2.0% of all reported losses that year

How this kind of attack works

The contract's bookkeeping was wrong, for example the conversion between shares and assets, so the attacker redeemed far more than they put in.

Would a pre-payment check have helped

Needs other controls

Accounting and share-math bugs are contract-layer problems for code audits.

Other incidents with the same technique

Sources

This page restates public reports and is not OceanAlt's judgment of any party. To report an error, email business@oceanalt.com; we review within 48 hours.

← Back to incidents