shield Flash Loan Attack · $1M loss

CompoundFork Hack: How $1M Was Lost in a Flash Loan Attack (2024)

On October 2024, CompoundFork was exploited in a flash loan attack on Base, resulting in approximately $1M in losses. That makes the CompoundFork exploit the 86th largest DeFi incident out of 690 documented in our archive.

Attack Mechanics: How the CompoundFork Flash Loan Attack Played Out

Exploit Class Applied to CompoundFork

The CompoundFork incident on October 26, 2024 is classified as a Flash Loan Attack. Attackers borrow huge amounts via uncollateralised single-transaction loans and manipulate protocol state before repaying in the same block. In the full archive, CompoundFork is 1 of 27 documented flash loan attack incidents.

CompoundFork in Context

At $1M, the CompoundFork exploit is a significant ($1M–$10M) event compared to the largest same-class incident in our archive — PolterFinance (2024) at $7M.

Prior Flash Loan Attack Before CompoundFork

The nearest flash loan attack incident before CompoundFork was OMPx Contract, 71 days earlier on August 16, 2024. The same exploit class surfaced again within the flash loan attack attack surface.

CompoundFork Vulnerability Signature

The primary source categorises the CompoundFork exploit specifically as “Flashloan attack”. This narrower label is entity-specific: it reflects how the CompoundFork contract failed, rather than the broad flash loan attack pattern alone.

Target Chain: Base

The vulnerable CompoundFork contract was deployed on Base — one of 3 documented incidents on Base. This determines the block cadence, mempool, and forensic tooling available to investigators.

Impact & Recovery for CompoundFork

CompoundFork Loss Figure

The CompoundFork exploit caused $1,000,000 in losses — a significant ($1M–$10M) incident and the 22nd largest of 188 documented in 2024. This single incident represents 0.3% of all tracked losses that year.

Where CompoundFork Sits Among Flash Loan Attack Attacks

Ranked by loss size, CompoundFork is the 3rd largest of 27 flash loan attack incidents documented. That puts the CompoundFork loss above the class average of $577.3K.

Timeline Since the CompoundFork Incident

The CompoundFork exploit occurred 1.5 years ago (535 days). The contract, its fork-block, and the attack transaction remain on-chain and forensically reproducible.

Primary Reference for CompoundFork

Public post-mortem / on-chain analysis for the CompoundFork incident: view source.

FAQ

How much did CompoundFork lose?

The CompoundFork exploit in October 2024 resulted in $1,000,000 in losses — the 22nd largest of 188 DeFi incidents that year.

When did the CompoundFork hack happen?

The CompoundFork exploit was recorded on October 26, 2024 — 535 days ago.

What type of exploit hit CompoundFork?

The CompoundFork incident is classified as a Flash Loan Attack. Attackers borrow huge amounts via uncollateralised single-transaction loans and manipulate protocol state before repaying in the same block.

Which blockchain was CompoundFork deployed on?

The CompoundFork contract was deployed on Base, one of 3 documented incidents on that chain.

How does CompoundFork compare to the largest Flash Loan Attack attack?

The largest flash loan attack incident in our archive is PolterFinance (2024) at $7M. The CompoundFork loss is $1M.

How does the study measure the sentiment of tweets?

Using the Valence Aware Dictionary and sEntiment Reasoner (VADER).

How were the countries selected for the study?

Based on their contribution to world GDP, focusing on the top 10 countries.