shield Business Logic Flaw · $150K loss

TGBS Hack: How $150K Was Lost in a Business Logic Flaw (2024)

On March 2024, TGBS was exploited in a business logic flaw, resulting in approximately $150K in losses. That makes the TGBS exploit the 185th largest DeFi incident out of 690 documented in our archive.

Attack Mechanics: How the TGBS Business Logic Flaw Played Out

Exploit Class Applied to TGBS

The TGBS incident on March 6, 2024 is classified as a Business Logic Flaw. A business-logic bug in the contract — such as an incorrect formula or missing state update — lets the attacker withdraw more than their share. In the full archive, TGBS is 1 of 144 documented business logic flaw incidents.

TGBS in Context

At $150K, the TGBS exploit is a minor (<$1M) event compared to the largest same-class incident in our archive — – EulerFinance (2023) at $200M.

Prior Business Logic Flaw Before TGBS

The nearest business logic flaw incident before TGBS was BlueberryProtocol, 12 days earlier on February 23, 2024 ($1.4M lost). The same exploit class surfaced again within the business logic flaw attack surface.

Impact & Recovery for TGBS

TGBS Loss Figure

The TGBS exploit caused $150,000 in losses — a minor (<$1M) incident and the 52nd largest of 188 documented in 2024.

Where TGBS Sits Among Business Logic Flaw Attacks

Ranked by loss size, TGBS is the 36th largest of 144 business logic flaw incidents documented. That puts the TGBS loss below the class average of $6.08M.

Timeline Since the TGBS Incident

The TGBS exploit occurred 2.1 years ago (769 days). The contract, its fork-block, and the attack transaction remain on-chain and forensically reproducible.

Primary Reference for TGBS

Public post-mortem / on-chain analysis for the TGBS incident: view source.

FAQ

How much did TGBS lose?

The TGBS exploit in March 2024 resulted in $150,000 in losses — the 52nd largest of 188 DeFi incidents that year.

When did the TGBS hack happen?

The TGBS exploit was recorded on March 6, 2024 — 769 days ago.

What type of exploit hit TGBS?

The TGBS incident is classified as a Business Logic Flaw. A business-logic bug in the contract — such as an incorrect formula or missing state update — lets the attacker withdraw more than their share.

How common is the Business Logic Flaw pattern seen at TGBS?

Our archive contains 144 documented business logic flaw incidents. The TGBS incident is one of them.

How does TGBS compare to the largest Business Logic Flaw attack?

The largest business logic flaw incident in our archive is – EulerFinance (2023) at $200M. The TGBS loss is $150K.

How does the proposed defense method manipulate the output?

By adjusting the output confidence scores to mislead attackers.

What is the primary classification of cryptocurrencies according to the FASB's proposed standards?

Cryptocurrencies are primarily classified as intangible assets under the FASB's proposed standards.