Back to dashboard
Sunday, April 17, 2022 at 01:08 UTC

Beanstalk

Flash-loaned governance vote drained the protocol.

Lost
Funds stolen
$182.00M
Recovered
$0.00M0%
Still outstanding
$182.00M
Chain
Ethereum
Category
DeFi
Attack vector
Flash Loan
Reported by
PeckShield
Incident ID
h2022-3

Exploit & recovery timeline

  1. Apr 16, 2022 · 23:08 UTC
    Attack preparation

    Attacker wallets funded and staged ahead of the flash loan exploit against Beanstalk.

  2. Apr 17, 2022 · 01:08 UTC
    Exploit executed

    $182.0M drained from Beanstalk on Ethereum via Flash Loan.

  3. Apr 17, 2022 · 02:08 UTC
    Detected by PeckShield

    PeckShield flagged the anomalous transactions and published an initial alert.

  4. Apr 17, 2022 · 05:08 UTC
    Protocol response

    Beanstalk paused affected contracts or withdrawals and began tracing outbound flows.

  5. Apr 18, 2022 · 01:08 UTC
    Funds traced

    Stolen assets followed through mixers, bridges, and exchange deposit addresses.

  6. May 17, 2022 · 01:08 UTC
    Funds written off

    No assets recovered; losses absorbed by the protocol, insurers, or users.