shield Business Logic Flaw · $36K loss

LFI Token Business Logic Flaw postmortem (May 2023) — $36K drained

On May 2023, LFI Token was exploited in a business logic flaw, resulting in approximately $36K in losses. That makes the LFI Token exploit the 289th largest DeFi incident out of 690 documented in our archive.

Attack Mechanics: How the LFI Token Business Logic Flaw Played Out

Exploit Class Applied to LFI Token

The LFI Token incident on May 23, 2023 is classified as a Business Logic Flaw. A business-logic bug in the contract — such as an incorrect formula or missing state update — lets the attacker withdraw more than their share. In the full archive, LFI Token is 1 of 144 documented business logic flaw incidents.

LFI Token in Context

At $36K, the LFI Token exploit is a minor (<$1M) event compared to the largest same-class incident in our archive — – EulerFinance (2023) at $200M.

Prior Business Logic Flaw Before LFI Token

The nearest business logic flaw incident before LFI Token was Bitpaidio, 10 days earlier on May 13, 2023 ($30K lost). The same exploit class surfaced again within the business logic flaw attack surface.

Impact & Recovery for LFI Token

LFI Token Loss Figure

The LFI Token exploit caused $36,000 in losses — a minor (<$1M) incident and the 109th largest of 214 documented in 2023.

Where LFI Token Sits Among Business Logic Flaw Attacks

Ranked by loss size, LFI Token is the 56th largest of 144 business logic flaw incidents documented. That puts the LFI Token loss below the class average of $6.08M.

Timeline Since the LFI Token Incident

The LFI Token exploit occurred 2.9 years ago (1,057 days). The contract, its fork-block, and the attack transaction remain on-chain and forensically reproducible.

Primary Reference for LFI Token

Public post-mortem / on-chain analysis for the LFI Token incident: view source.

FAQ

How much did LFI Token lose?

The LFI Token exploit in May 2023 resulted in $36,000 in losses — the 109th largest of 214 DeFi incidents that year.

When did the LFI Token hack happen?

The LFI Token exploit was recorded on May 23, 2023 — 1,057 days ago.

What type of exploit hit LFI Token?

The LFI Token incident is classified as a Business Logic Flaw. A business-logic bug in the contract — such as an incorrect formula or missing state update — lets the attacker withdraw more than their share.

How common is the Business Logic Flaw pattern seen at LFI Token?

Our archive contains 144 documented business logic flaw incidents. The LFI Token incident is one of them.

How does LFI Token compare to the largest Business Logic Flaw attack?

The largest business logic flaw incident in our archive is – EulerFinance (2023) at $200M. The LFI Token loss is $36K.

How does the BBDSPP scheme enhance data privacy compared to traditional methods?

By using zero-knowledge proofs, it verifies access without exposing sensitive information, thus enhancing privacy.

What role do adaptor signatures play in payment channel networks (PCNs)?

Adaptor signatures serve as a crucial technology for PCNs, enabling fair exchanges and addressing scalability and throughput issues in blockchains.