Harvest Finance

Exploit & recovery timeline

1. Oct 26, 2020 · 03:00 UTC
   Attack preparation

   Attacker wallets funded and staged ahead of the flash loan exploit against Harvest Finance.

2. Oct 26, 2020 · 05:00 UTC
   Exploit executed

   $24.0M drained from Harvest Finance on Ethereum via Flash Loan.

3. Oct 26, 2020 · 06:00 UTC
   Detected by PeckShield

   PeckShield flagged the anomalous transactions and published an initial alert.

4. Oct 26, 2020 · 09:00 UTC
   Protocol response

   Harvest Finance paused affected contracts or withdrawals and began tracing outbound flows.

5. Oct 27, 2020 · 05:00 UTC
   Funds traced

   Stolen assets followed through mixers, bridges, and exchange deposit addresses.

6. Nov 2, 2020 · 05:00 UTC
   Partial recovery

   $2.5M of $24.0M recovered (10%); the remainder is still unaccounted for.

7. Nov 25, 2020 · 05:00 UTC
   Investigation continues

   Remaining funds monitored across chains with exchange partners notified.