shield Arbitrary Call · $17K loss

$17K drained from MIMSpell in an arbitrary call (June 2023)

On June 2023, MIMSpell was exploited in a arbitrary call, resulting in approximately $17K in losses. That makes the MIMSpell exploit the 345th largest DeFi incident out of 690 documented in our archive.

Attack Mechanics: How the MIMSpell Arbitrary Call Played Out

Exploit Class Applied to MIMSpell

The MIMSpell incident on June 20, 2023 is classified as a Arbitrary Call. The contract executes an external call with attacker-controlled target or calldata, letting them impersonate the contract. In the full archive, MIMSpell is 1 of 21 documented arbitrary call incidents.

MIMSpell in Context

At $17K, the MIMSpell exploit is a minor (<$1M) event compared to the largest same-class incident in our archive — Seneca (2024) at $6M.

Prior Arbitrary Call Before MIMSpell

The nearest arbitrary call incident before MIMSpell was – RevertFinance, 122 days earlier on February 18, 2023 ($30K lost). The same exploit class surfaced again within the arbitrary call attack surface.

MIMSpell Vulnerability Signature

The primary source categorises the MIMSpell exploit specifically as “Arbitrary External Call Vulnerability”. This narrower label is entity-specific: it reflects how the MIMSpell contract failed, rather than the broad arbitrary call pattern alone.

Impact & Recovery for MIMSpell

MIMSpell Loss Figure

The MIMSpell exploit caused $17,000 in losses — a minor (<$1M) incident and the 130th largest of 214 documented in 2023.

Where MIMSpell Sits Among Arbitrary Call Attacks

Ranked by loss size, MIMSpell is the 14th largest of 21 arbitrary call incidents documented. That puts the MIMSpell loss below the class average of $783.5K.

Timeline Since the MIMSpell Incident

The MIMSpell exploit occurred 2.8 years ago (1,029 days). The contract, its fork-block, and the attack transaction remain on-chain and forensically reproducible.

Primary Reference for MIMSpell

Public post-mortem / on-chain analysis for the MIMSpell incident: view source.

FAQ

How much did MIMSpell lose?

The MIMSpell exploit in June 2023 resulted in $17,000 in losses — the 130th largest of 214 DeFi incidents that year.

When did the MIMSpell hack happen?

The MIMSpell exploit was recorded on June 20, 2023 — 1,029 days ago.

What type of exploit hit MIMSpell?

The MIMSpell incident is classified as a Arbitrary Call. The contract executes an external call with attacker-controlled target or calldata, letting them impersonate the contract.

How common is the Arbitrary Call pattern seen at MIMSpell?

Our archive contains 21 documented arbitrary call incidents. The MIMSpell incident is one of them.

How does MIMSpell compare to the largest Arbitrary Call attack?

The largest arbitrary call incident in our archive is Seneca (2024) at $6M. The MIMSpell loss is $17K.

What are the main components of Industry 4.0 technologies applicable to humanitarian supply chains?

Internet of Things, big data analytics, artificial intelligence, machine learning, blockchain, cloud computing, and robotics.

How does the proposed system ensure patient privacy and data confidentiality?

Through encryption, use of private blockchain networks, and secure access controls managed by smart contracts.