Preview surface — demo data. Where real data exists today (e.g. RealT, BlackRock BUIDL, Lift Dollar) we render it; everywhere else we render synthetic enrichment generated deterministically from public signal and clearly marked Demo or Inferred. The Phase 3 roadmap replaces every synthetic source with live ingestion — see Methodology → Exposure Graph & Similarity Engine.
← back to incident ledger

flash loan governanceDemo

Sep 13, 2023 · $34.6M · protocol

Narrative

On 2023-09-13, Safe{Core} suffered a flash loan governance incident resulting in approximately $34,607,565 in losses. The exploit targeted the protocol layer. A flash loan was used to amplify the attack. Attribution: unknown. This is a demonstration entry — not a real incident.

Victims

Classification

Root cause
flash_loan_governance
Secondary causes
oracle_manipulation
Attack layer
protocol
Strategy
tech_vuln
Actor role
target
Attribution
unknown
Attacker address
Flash loan
yes
Audited at time
no
Bounty at time
no

AADAPT mappings

DEMO:AADAPT.TA0040DEMO:AADAPT.TA0009DEMO:AADAPT.T1565.003

Evidence

Disclosure date
Sep 15, 2023
Funds recovered
Audit firms at time
Post-mortem URLs (synthetic)
  • https://medium.com/safe-core/post-mortem-safe-core-2023-09-13
  • https://rekt.news/safe-core-rekt
  • https://blog.safe-core.xyz/incident-report
tx hashes (3)
  • 0xadf05d585b6e007c30aed7b55bec44b83fee6b78978247493921a7575178f874
  • 0x72b10dda46051606491ae223008d1f0c5053a0b0a3ac477d83e1ed9a32b6c60d
  • 0x6469813935c0804ab9f82114ad2abcb1a9dbcc33cab06bbec3d45efc92dea11b