shield Business Logic Flaw · $645K loss

Tradeonorion Hack: How $645K Was Lost in a Business Logic Flaw (2024)

On May 2024, Tradeonorion was exploited in a business logic flaw, resulting in approximately $645K in losses. That makes the Tradeonorion exploit the 108th largest DeFi incident out of 690 documented in our archive.

Attack Mechanics: How the Tradeonorion Business Logic Flaw Played Out

Exploit Class Applied to Tradeonorion

The Tradeonorion incident on May 28, 2024 is classified as a Business Logic Flaw. A business-logic bug in the contract — such as an incorrect formula or missing state update — lets the attacker withdraw more than their share. In the full archive, Tradeonorion is 1 of 144 documented business logic flaw incidents.

Tradeonorion in Context

At $645K, the Tradeonorion exploit is a minor (<$1M) event compared to the largest same-class incident in our archive — – EulerFinance (2023) at $200M.

Prior Business Logic Flaw Before Tradeonorion

The nearest business logic flaw incident before Tradeonorion was NORMIE, 2 days earlier on May 26, 2024 ($490K lost). The same exploit class surfaced again within the business logic flaw attack surface.

Impact & Recovery for Tradeonorion

Tradeonorion Loss Figure

The Tradeonorion exploit caused $645,000 in losses — a minor (<$1M) incident and the 24th largest of 188 documented in 2024. This single incident represents 0.2% of all tracked losses that year.

Where Tradeonorion Sits Among Business Logic Flaw Attacks

Ranked by loss size, Tradeonorion is the 20th largest of 144 business logic flaw incidents documented. That puts the Tradeonorion loss below the class average of $6.08M.

Timeline Since the Tradeonorion Incident

The Tradeonorion exploit occurred 1.9 years ago (686 days). The contract, its fork-block, and the attack transaction remain on-chain and forensically reproducible.

Primary Reference for Tradeonorion

Public post-mortem / on-chain analysis for the Tradeonorion incident: view source.

FAQ

How much did Tradeonorion lose?

The Tradeonorion exploit in May 2024 resulted in $645,000 in losses — the 24th largest of 188 DeFi incidents that year.

When did the Tradeonorion hack happen?

The Tradeonorion exploit was recorded on May 28, 2024 — 686 days ago.

What type of exploit hit Tradeonorion?

The Tradeonorion incident is classified as a Business Logic Flaw. A business-logic bug in the contract — such as an incorrect formula or missing state update — lets the attacker withdraw more than their share.

How common is the Business Logic Flaw pattern seen at Tradeonorion?

Our archive contains 144 documented business logic flaw incidents. The Tradeonorion incident is one of them.

How does Tradeonorion compare to the largest Business Logic Flaw attack?

The largest business logic flaw incident in our archive is – EulerFinance (2023) at $200M. The Tradeonorion loss is $645K.

What are some subsystems of economic activity within the Ethereum network mentioned in the study?

Subsystems include bridges, centralized exchanges (CEX), decentralized exchanges (DEX), maximal extractable value (MEV) bots, non-fungible tokens (NFTs), and stablecoins.

What methodology is employed to analyze the impact of cryptocurrency holdings?

The study uses an ordinary least squares (OLS) regression model to assess the relationship between cryptocurrency holdings and company performance.