On July 2023, FFIST was exploited in a business logic flaw, resulting in approximately $110K in losses. That makes the FFIST exploit the 204th largest DeFi incident out of 690 documented in our archive.
Attack Mechanics: How the FFIST Business Logic Flaw Played Out
Exploit Class Applied to FFIST
The FFIST incident on July 20, 2023 is classified as a Business Logic Flaw. A business-logic bug in the contract — such as an incorrect formula or missing state update — lets the attacker withdraw more than their share. In the full archive, FFIST is 1 of 144 documented business logic flaw incidents.
FFIST in Context
At $110K, the FFIST exploit is a minor (<$1M) event compared to the largest same-class incident in our archive — – EulerFinance (2023) at $200M.
Prior Business Logic Flaw Before FFIST
The nearest business logic flaw incident before FFIST was APEDAO, 2 days earlier on July 18, 2023 ($7K lost). The same exploit class surfaced again within the business logic flaw attack surface.
Impact & Recovery for FFIST
FFIST Loss Figure
The FFIST exploit caused $110,000 in losses — a minor (<$1M) incident and the 80th largest of 214 documented in 2023.
Where FFIST Sits Among Business Logic Flaw Attacks
Ranked by loss size, FFIST is the 38th largest of 144 business logic flaw incidents documented. That puts the FFIST loss below the class average of $6.08M.
Timeline Since the FFIST Incident
The FFIST exploit occurred 2.7 years ago (999 days). The contract, its fork-block, and the attack transaction remain on-chain and forensically reproducible.
Primary Reference for FFIST
Public post-mortem / on-chain analysis for the FFIST incident: view source.
FAQ
How much did FFIST lose?
The FFIST exploit in July 2023 resulted in $110,000 in losses — the 80th largest of 214 DeFi incidents that year.
When did the FFIST hack happen?
The FFIST exploit was recorded on July 20, 2023 — 999 days ago.
What type of exploit hit FFIST?
The FFIST incident is classified as a Business Logic Flaw. A business-logic bug in the contract — such as an incorrect formula or missing state update — lets the attacker withdraw more than their share.
How common is the Business Logic Flaw pattern seen at FFIST?
Our archive contains 144 documented business logic flaw incidents. The FFIST incident is one of them.
How does FFIST compare to the largest Business Logic Flaw attack?
The largest business logic flaw incident in our archive is – EulerFinance (2023) at $200M. The FFIST loss is $110K.
What challenges does blockchain gaming face for wider adoption?
Challenges include scalability, understanding blockchain's complexity, and integrating it seamlessly with gaming narratives and mechanics.
What future research directions does the document suggest?
Further analysis of COVID-19's long-term effects on society and the economy.