Incident Archive

Business Logic Flaw

A business-logic bug in the contract — such as an incorrect formula or missing state update — lets the attacker withdraw more than their share. This archive tracks 144 incidents across 2021–2026, with $613.61M in cumulative losses.