On February 2025, FourMeme was exploited in a business logic flaw, resulting in approximately $186K in losses. That makes the FourMeme exploit the 169th largest DeFi incident out of 690 documented in our archive.
Attack Mechanics: How the FourMeme Business Logic Flaw Played Out
Exploit Class Applied to FourMeme
The FourMeme incident on February 11, 2025 is classified as a Business Logic Flaw. A business-logic bug in the contract — such as an incorrect formula or missing state update — lets the attacker withdraw more than their share. In the full archive, FourMeme is 1 of 144 documented business logic flaw incidents.
FourMeme in Context
At $186K, the FourMeme exploit is a minor (<$1M) event compared to the largest same-class incident in our archive — – EulerFinance (2023) at $200M.
Prior Business Logic Flaw Before FourMeme
The nearest business logic flaw incident before FourMeme was IdolsNFT, 28 days earlier on January 14, 2025. The same exploit class surfaced again within the business logic flaw attack surface.
FourMeme Vulnerability Signature
The primary source categorises the FourMeme exploit specifically as “Logic Flaw”. This narrower label is entity-specific: it reflects how the FourMeme contract failed, rather than the broad business logic flaw pattern alone.
Impact & Recovery for FourMeme
FourMeme Loss Figure
The FourMeme exploit caused $186,000 in losses — a minor (<$1M) incident and the 25th largest of 96 documented in 2025.
Where FourMeme Sits Among Business Logic Flaw Attacks
Ranked by loss size, FourMeme is the 31st largest of 144 business logic flaw incidents documented. That puts the FourMeme loss below the class average of $6.08M.
Timeline Since the FourMeme Incident
The FourMeme exploit occurred 1.2 years ago (427 days). The contract, its fork-block, and the attack transaction remain on-chain and forensically reproducible.
Primary Reference for FourMeme
Public post-mortem / on-chain analysis for the FourMeme incident: view source.
FAQ
How much did FourMeme lose?
The FourMeme exploit in February 2025 resulted in $186,000 in losses — the 25th largest of 96 DeFi incidents that year.
When did the FourMeme hack happen?
The FourMeme exploit was recorded on February 11, 2025 — 427 days ago.
What type of exploit hit FourMeme?
The FourMeme incident is classified as a Business Logic Flaw. A business-logic bug in the contract — such as an incorrect formula or missing state update — lets the attacker withdraw more than their share.
How common is the Business Logic Flaw pattern seen at FourMeme?
Our archive contains 144 documented business logic flaw incidents. The FourMeme incident is one of them.
How does FourMeme compare to the largest Business Logic Flaw attack?
The largest business logic flaw incident in our archive is – EulerFinance (2023) at $200M. The FourMeme loss is $186K.
What are the environmental concerns associated with cryptocurrency mining?
Cryptocurrency mining is energy-intensive and raises sustainability concerns.
What is the role of simulated annealing in the proposed attack method?
To approximate the global optimum of the adversarial example search without gradient estimation.