Hacks Olympix would have prevented

An unrestricted setter let a crafted recovery period wrap the deadline into the past, skipping the waiting period, and the execution module ran the same signed payload 19 times in one transaction.

BiFi Lending's USDT market sat untouched for 36 days, and its interest math let one flash loan drain $165.6K. The MEV operator returned most of it, leaving BiFi about $6.5K short.

Anyone could settle Kolan's expired insurance windows, and settling put their escrowed ETH back into the pool at the current spot price, so an attacker moved KLN's price first and sold into the fresh liquidity.

UNCX's Vesting V2 paid out against the pool's full balance by shares, and a sequence of ordinary calls shrank shares faster than deposits, draining tokens projects had locked on four chains.

A failed Vestaa swap transaction left an unspent Permit2 signature sitting in public calldata, and two seconds later a searcher reused it to pull 3.1924 WETH from Vestaa's own wallet.

One wei of DAI bought a single share of BitBay's DAI/USDC vault, and redeeming it returned 14,838.47 DAI because _withdraw() paid out the full balance whenever the vault's liquidity was zero.

EtherVista's pool asked whether K had held after each swap and answered yes while $18.6K drained, because multiplying two uint112 reserves overflowed and wrapped to a small number.

A MakerDAO keeper won 200 ETH with zero bids on Black Thursday and never collected it. Six years later, one unguarded function gave it away. How the drain worked.

A public fee function on two legacy Set Protocol products charged nothing yet rounded each token's collateral share up, from 4927 to 4928 in the first run. Eight flash-funded runs turned that into about $50K.

Malt's swap called a rebalance hook that pulled treasury DAI into the pool, then checked its invariant against final balances, so swaps with 1 DAI of real input were credited with over 6,000 DAI the treasury had sent.

GoldPesa's hook burned its liquidity for 148,868.60 USDC but received only 33,868.60, because it collected the whole session's net balance and the rest covered an attacker's unpaid position.

FlashLoopAdapter asked each caller whether it was an enabled Safe and believed the answer, so a fake Safe steered the module's swap call into two real Safes and walked off with $305K in collateral.

MUSystem paid its first-deposit bonus twice, once as an instant ETH refund and again inside the withdrawable balance, so batches of fresh addresses cycling a Balancer flash loan drained all 5.3352 ETH.

SKYDAO's sell tax let a pool controller burn the pair's entire SKYDAO balance and sync its books mid-sell, so one contract-creation transaction emptied all $183K of USDT from the pair.

MCN Labs' LPBonus had received about 940K FIST in a year. A flash loan made two readings of the same pool reserve disagree, and the attacker claimed 1.44M FIST and left with about $92.6K in USDT.

Old Magic Eden approvals to Payment Processor V2 never expired, and the contract trusted a forgeable original sender from its forwarder, letting a third party take NFTs and 660 WETH from approved wallets.

A swap that should have returned 0.002089 WBNB paid out 1.651 BNB, because the helper treated the USDT the pool received as the WBNB it should send out.

GaslessReservoirEnabler forwarded any call to whitelisted contracts, including WETH transferFrom calls on users who had approved it, so an attacker took about $23K from 997 addresses in three transactions.

One public router function with no caller check let an outside wallet upgrade The Red Village's SeasonService, and the new code pulled approved WETH from 299 player wallets for an $80.7K drain.

Internet Token's LiquidityUnifier held the right to mint INT and let any caller choose the pool it trusted. A fake pool deployed moments earlier collected 925 million INT and sold enough for $16K.

One transaction placed a 35,486 USDC offer on DoinGud's marketplace and accepted it twice with identical calldata. Both paid out, and the second came from USDC other users had left in escrow.

Likwid's zero-leverage borrow branch never wrote the field that updates pool reserves, so an attacker borrowed again and again at the same 4.7857 BNB quote and pulled 74.31 BNB from the vault.

About $421 of NSTR borrowed $3.5M from Nostra after one oracle source read a tiny attacker-made pool at $99 and the protocol averaged it with the real price of under a cent.

PrimeFi's verifyReport() let anyone submit validly signed Chainlink reports without checking their age, lifting PRFI's stored price about 52 times inside one transaction and draining 425.52 WHYPE.

330 pre-funded Startale smart accounts were set up correctly and then set up again by a stranger in the same transaction, because the only guard on initializeAccount was a flag in transient storage.

Flamincome's strategy valued itself from a Convex balance anyone could add to, priced with a Curve function that ignored a depeg. Cheap LP tokens pushed the share price up and $597K of USDT left.

Nimiq's handlers checked signatures and nonces inside the OpenGSN paymaster hook, and the caller picks the paymaster. An attacker staked 1 POL, brought a paymaster that approved everything, and took about $50.5K.

BonfireSwap's router let the caller name any address as the source of a transfer and spent that holder's unlimited allowance, so one transaction emptied 41 BONFIRE wallets and sold the haul for 66 WBNB.

One wallet pumped SPIRAL's price and six fresh wallets borrowed 64.71 ETH against it in the same block, because Spiral's same-block guard only remembered who signed the transaction.

An old Veda AtomicQueue let any caller pick whose approval paid for a trade, and EIP-7702 wallets that silently accepted its callback lost 14.45 liquidETH and 7.05 USDC.