Preview surface — demo data. Where real data exists today (e.g. RealT, BlackRock BUIDL, Lift Dollar) we render it; everywhere else we render synthetic enrichment generated deterministically from public signal and clearly marked Demo or Inferred. The Phase 3 roadmap replaces every synthetic source with live ingestion — see Methodology → Exposure Graph & Similarity Engine.
← back to incident ledger

proxy admin compromiseDemo

Apr 19, 2022 · $75.9M · protocol

Narrative

On 2022-04-19, Ondo Finance suffered a proxy admin compromise incident resulting in approximately $75,929,823 in losses. The exploit targeted the protocol layer. Attribution: unknown. This is a demonstration entry — not a real incident.

Classification

Root cause
proxy_admin_compromise
Secondary causes
access_control_missing
Attack layer
protocol
Strategy
tech_vuln
Actor role
target
Attribution
unknown
Attacker address
Flash loan
no
Audited at time
no
Bounty at time
yes

AADAPT mappings

DEMO:AADAPT.TA0006DEMO:AADAPT.TA0008DEMO:AADAPT.T1078.004

Evidence

Disclosure date
Apr 24, 2022
Funds recovered
Audit firms at time
Post-mortem URLs (synthetic)
  • https://medium.com/ondo-finance/post-mortem-ondo-finance-2022-04-19
  • https://rekt.news/ondo-finance-rekt
tx hashes (3)
  • 0x479e4d152726c758d7a7b5c53190a44408a5e785064eda425158abc4653103db
  • 0xf22f97539778e1e38916ac2401528de77b8b51b092a56d9306604cafb54672b4
  • 0x5db1fcb239db92d55aefb8c056082c4debfc15eb5605427caf542eb26aa3f363