shield Input Validation · $88K loss

AffineDeFi Input Validation postmortem (February 2024) — $88K drained

On February 2024, AffineDeFi was exploited in a input validation, resulting in approximately $88K in losses. That makes the AffineDeFi exploit the 229th largest DeFi incident out of 690 documented in our archive.

Attack Mechanics: How the AffineDeFi Input Validation Played Out

Exploit Class Applied to AffineDeFi

The AffineDeFi incident on February 1, 2024 is classified as a Input Validation. The contract accepts an attacker-controlled input it should have rejected. In the full archive, AffineDeFi is 1 of 21 documented input validation incidents.

AffineDeFi in Context

At $88K, the AffineDeFi exploit is a minor (<$1M) event compared to the largest same-class incident in our archive — OrbitChain (2024) at $81M.

Prior Input Validation Before AffineDeFi

The nearest input validation incident before AffineDeFi was OrbitChain, 31 days earlier on January 1, 2024 ($81M lost). The same exploit class surfaced again within the input validation attack surface.

AffineDeFi Vulnerability Signature

The primary source categorises the AffineDeFi exploit specifically as “lack of validation userData”. This narrower label is entity-specific: it reflects how the AffineDeFi contract failed, rather than the broad input validation pattern alone.

Impact & Recovery for AffineDeFi

AffineDeFi Loss Figure

The AffineDeFi exploit caused $88,000 in losses — a minor (<$1M) incident and the 65th largest of 188 documented in 2024.

Where AffineDeFi Sits Among Input Validation Attacks

Ranked by loss size, AffineDeFi is the 10th largest of 21 input validation incidents documented. That puts the AffineDeFi loss below the class average of $5.88M.

Timeline Since the AffineDeFi Incident

The AffineDeFi exploit occurred 2.2 years ago (803 days). The contract, its fork-block, and the attack transaction remain on-chain and forensically reproducible.

Primary Reference for AffineDeFi

Public post-mortem / on-chain analysis for the AffineDeFi incident: view source.

FAQ

How much did AffineDeFi lose?

The AffineDeFi exploit in February 2024 resulted in $88,000 in losses — the 65th largest of 188 DeFi incidents that year.

When did the AffineDeFi hack happen?

The AffineDeFi exploit was recorded on February 1, 2024 — 803 days ago.

What type of exploit hit AffineDeFi?

The AffineDeFi incident is classified as a Input Validation. The contract accepts an attacker-controlled input it should have rejected.

How common is the Input Validation pattern seen at AffineDeFi?

Our archive contains 21 documented input validation incidents. The AffineDeFi incident is one of them.

How does AffineDeFi compare to the largest Input Validation attack?

The largest input validation incident in our archive is OrbitChain (2024) at $81M. The AffineDeFi loss is $88K.

What is the significance of achieving unlinkability in cross-chain transactions?

Unlinkability ensures that transactions between different blockchains cannot be traced back to the parties involved, enhancing privacy.

What is the main advantage of using the UCR dataset for evaluation?

It provides a diverse set of time series data for comprehensive testing.