Back to dashboard
Monday, November 6, 2017 at 18:00 UTC

Parity Library

Suicide call on shared library froze 513k ETH forever.

Lost
Funds stolen
$280.00M
Recovered
$0.00M0%
Still outstanding
$280.00M
Chain
Ethereum
Category
Wallet
Attack vector
Access Control
Reported by
CertiK
Incident ID
h2017-3

Exploit & recovery timeline

  1. Nov 6, 2017 · 16:00 UTC
    Attack preparation

    Attacker wallets funded and staged ahead of the access control exploit against Parity Library.

  2. Nov 6, 2017 · 18:00 UTC
    Exploit executed

    $280.0M drained from Parity Library on Ethereum via Access Control.

  3. Nov 6, 2017 · 19:00 UTC
    Detected by CertiK

    CertiK flagged the anomalous transactions and published an initial alert.

  4. Nov 6, 2017 · 22:00 UTC
    Protocol response

    Parity Library paused affected contracts or withdrawals and began tracing outbound flows.

  5. Nov 7, 2017 · 18:00 UTC
    Funds traced

    Stolen assets followed through mixers, bridges, and exchange deposit addresses.

  6. Dec 6, 2017 · 18:00 UTC
    Funds written off

    No assets recovered; losses absorbed by the protocol, insurers, or users.