Hack history / 2023 / Hack or exploit
Arena SocialFi
Hack or exploit on Oct 7, 2023 · Reentrancy
ATTACK TX CONFIRMED ON CHAINSOURCES AGREE ON DATE AND LOSS · 5 SOURCES
Lost
$3M
dollars at the time
Returned
$2.7M
90% of the loss, as a source states it
Rank
#608
among thefts by dollars lost
What happened
On October 7, 2023, Stars Arena (an Avalanche friend.tech clone) was exploited via reentrancy when the share issuance function lacked reentrancy guards. The attacker called the function multiple times in one transaction to manipulate weight calculations, buying 1 share and selling it at ~274k AVAX to drain $2.97M.
Details
- Date
- Oct 7, 2023
- Kind
- Hack or exploit
- Method
- Reentrancy
- How in
- Smart contract bug
- Target
- Other
- Chains
- Avalanche
- Audit (rekt.news)
- unaudited
After the theft
- Recovered or seized
- yes, amount not stated
“On October 12, Stars Arena tweeted that they have recovered approximately 90% of the lost funds.” (SlowMist Hacked) - Returned by the attacker
- yes, amount not stated
“266,104 AVAX were lost, and the hacker returned 239,493 AVAX in two transactions.” (SlowMist Hacked) - Bounty paid
- yes, amount not stated
“27,610 AVAX were paid as a bounty.” (SlowMist Hacked) - Recovered or frozen
- $2.7M
“$3.0M taken, $300K after recovery or freezing” (Web3 Is Going Great)
Related incidents
NFT Trader 2023 · Hack or exploit · $3M
Orion Pools 2023 · Hack or exploit · $3M
GoodDollar 2023 · Hack or exploit · $2M
Sentiment 2023 · Hack or exploit · $1M
Midas Capital 2023 · Hack or exploit · $650K
Orion Pools 2023 · Hack or exploit · $3M
GoodDollar 2023 · Hack or exploit · $2M
Sentiment 2023 · Hack or exploit · $1M
Midas Capital 2023 · Hack or exploit · $650K
Cite this page
SwanBluechip, "Arena SocialFi hack, Oct 7, 2023: $3M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht61640a6a59/ (data as of 2026-10-31).