shield Business Logic Flaw · $2.3K loss

KEST Hack: How $2.3K Was Lost in a Business Logic Flaw (2023)

On December 2023, KEST was exploited in a business logic flaw, resulting in approximately $2.3K in losses. That makes the KEST exploit the 429th largest DeFi incident out of 690 documented in our archive.

Attack Mechanics: How the KEST Business Logic Flaw Played Out

Exploit Class Applied to KEST

The KEST incident on December 16, 2023 is classified as a Business Logic Flaw. A business-logic bug in the contract — such as an incorrect formula or missing state update — lets the attacker withdraw more than their share. In the full archive, KEST is 1 of 144 documented business logic flaw incidents.

KEST in Context

At $2.3K, the KEST exploit is a minor (<$1M) event compared to the largest same-class incident in our archive — – EulerFinance (2023) at $200M.

Prior Business Logic Flaw Before KEST

The nearest business logic flaw incident before KEST was PHIL, 2 days earlier on December 14, 2023 ($2 lost). The same exploit class surfaced again within the business logic flaw attack surface.

Impact & Recovery for KEST

KEST Loss Figure

The KEST exploit caused $2,300 in losses — a minor (<$1M) incident and the 156th largest of 214 documented in 2023.

Where KEST Sits Among Business Logic Flaw Attacks

Ranked by loss size, KEST is the 96th largest of 144 business logic flaw incidents documented. That puts the KEST loss below the class average of $6.08M.

Timeline Since the KEST Incident

The KEST exploit occurred 2.3 years ago (850 days). The contract, its fork-block, and the attack transaction remain on-chain and forensically reproducible.

Primary Reference for KEST

Public post-mortem / on-chain analysis for the KEST incident: view source.

FAQ

How much did KEST lose?

The KEST exploit in December 2023 resulted in $2,300 in losses — the 156th largest of 214 DeFi incidents that year.

When did the KEST hack happen?

The KEST exploit was recorded on December 16, 2023 — 850 days ago.

What type of exploit hit KEST?

The KEST incident is classified as a Business Logic Flaw. A business-logic bug in the contract — such as an incorrect formula or missing state update — lets the attacker withdraw more than their share.

How common is the Business Logic Flaw pattern seen at KEST?

Our archive contains 144 documented business logic flaw incidents. The KEST incident is one of them.

How does KEST compare to the largest Business Logic Flaw attack?

The largest business logic flaw incident in our archive is – EulerFinance (2023) at $200M. The KEST loss is $2.3K.

What is the main focus of the study?

The study focuses on examining the value relevance of ESG performance in Brazilian companies listed on the São Paulo Stock Exchange from 2010 to 2015.

What role does smart contract technology play in blockchain for e-commerce?

Smart contracts automate and secure transactions by executing terms of agreements based on predefined conditions.