Back to dashboard
Wednesday, November 22, 2023 at 03:00 UTC

KyberSwap

Concentrated-liquidity tick math exploited.

Partial
Funds stolen
$48.00M
Recovered
$4.70M10%
Still outstanding
$43.30M
Chain
Ethereum
Category
DeFi
Attack vector
Smart Contract Bug
Reported by
PeckShield
Incident ID
h2023-6

Exploit & recovery timeline

  1. Nov 22, 2023 · 01:00 UTC
    Attack preparation

    Attacker wallets funded and staged ahead of the smart contract bug exploit against KyberSwap.

  2. Nov 22, 2023 · 03:00 UTC
    Exploit executed

    $48.0M drained from KyberSwap on Ethereum via Smart Contract Bug.

  3. Nov 22, 2023 · 04:00 UTC
    Detected by PeckShield

    PeckShield flagged the anomalous transactions and published an initial alert.

  4. Nov 22, 2023 · 07:00 UTC
    Protocol response

    KyberSwap paused affected contracts or withdrawals and began tracing outbound flows.

  5. Nov 23, 2023 · 03:00 UTC
    Funds traced

    Stolen assets followed through mixers, bridges, and exchange deposit addresses.

  6. Nov 29, 2023 · 03:00 UTC
    Partial recovery

    $4.7M of $48.0M recovered (10%); the remainder is still unaccounted for.

  7. Dec 22, 2023 · 03:00 UTC
    Investigation continues

    Remaining funds monitored across chains with exchange partners notified.