Force DAO, A DeFi Hedge Fund, Loses Over $375k in xFORCE Token Exploit

The decentralized finance hedge fund, ForceDAO, confirmed the protocol suffered an attack on Sunday at around 7.06 AM UTC. According to a blog post by the ForceDAO team, the attack was instituted by five black hat attackers, with one of the attackers returning the funds.


On Sunday, DeFi hedge fund, ForceDAO announced an attack on its protocol – specifically the xFORCE contract. In a post mortem report from the ForceDAO team, a total of 183 ETH (~$367,000) was drained and liquidated on the contract exploit.

The attack was noticed first by a white-hat hacker, who started draining funds from the xFORCE contract and later returned the funds to the ForceDAO multisig wallet. Explaining the exploit, Polymath’s Mudit Gupta said the FORCE token transfer functions return false rather than reverting when the sender doesn’t have enough balance in their wallet.

“The xFORCE contract assumes FORCE will revert and does not handle the returned value,” Gupta explains.

This means anyone can deposit the synthetic FORCE tokens, xFORCE, even if they do not have any FORCE tokens. Hence, the attackers could mint fresh xFORCE tokens without the xFORCE contract locking up any FORCE tokens.

Four black hat hackers did not return their funds but rather sold them on the open market totaling $367,000 in losses for the xFORCE contract. Here is a complete list of addresses the hackers used to drain the funds.

According to the post, Force, xForce, and Force/ETH LPs on UniSwap and SushiSwap were all affected. The team has since removed all xFORCE tokens from the contract to prevent further hacks. Alberto Cevallos, the founder of ForceDAO, confirmed they would be refunding any affected parties in the hack and reward the white hat hacker.

“I can confirm that there will be a snapshot and new token,” Cevallos said. “We’ve begun internal re-structuring and will be announcing a plan over the coming days making any affected FORCE holders and LPs whole.”

Get Daily Headlines

Enter Best Email to Get Trending Crypto News & Bitcoin Market Updates

What to Know More?

Join Our Telegram Group to Receive Live Updates on The Latest Blockchain & Crypto News From Your Favorite Projects

Join Our Telegram

Stay Up to Date!

Join us on Twitter to Get The Latest Trading Signals, Blockchain News, and Daily Communication with Crypto Users!

Join Our Twitter

Add comment

E-mail is already registered on the site. Please use the Login form or enter another.

You entered an incorrect username or password

Sorry, you must be logged in to post a comment.
Bitcoin Exchange Guide