Astaria
Hack or exploit on Jun 20, 2023 · Contract Vulnerability
What happened
Astaria, the NFT lending platform, tweeted: "At 12:42 BST on June 20, Astaria became aware of an issue with the basic execution of BeaconProxy.sol that allowed an attacker to manipulate the beacon to load a malicious execution that would allow the attacker to invoke the self-destruct feature. All funds and NFTs are secure and no action is required at this point, Astaria is in a suspended state and cannot initiate new loans. The suspended state is to protect all assets in the protocol and we can confirm that no funds are missing. Just now Astaria successfully executed a white hat recovery script that saved all ERC20 and ERC721 assets of all LPs and borrowers. Astaria has been in public beta since May 25. The recovery script extracted all funds and NFTs to Astaria multi-signature addresses using the updated contract implementation and recovery code. We are drafting a plan for the next steps and will follow up as soon as possible."
Details
- Date
- Jun 20, 2023
- Kind
- Hack or exploit
- Method
- Contract Vulnerability
- How in
- Smart contract bug
- Target
- not stated
- Chains
- not stated
Reported by
Related incidents
CS Token 2023 · Hack or exploit · $714K
MIKE & SID 2023 · Hack or exploit · $171K
land 2023 · Hack or exploit · $150K
TrustTheTrident 2023 · Hack or exploit · $95K
SwanBluechip, "Astaria hack, Jun 20, 2023: undisclosed lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht348f5c13a3/ (data as of 2026-11-01).