Hack history / 2022 / Hack or exploit
UEarnPool
Hack or exploit on Nov 17, 2022 · Reward Logic Flaw
ATTACK TX CONFIRMED ON CHAINSOURCES DISAGREE ON DATE OR LOSS · 2 SOURCES
Lost
$16K
sources: $16K to $24K
Returned
none listed
as the sources state it
Rank
#2,170
among thefts by dollars lost
What happened
UEarnPool on BSC was exploited using a flash loan to repeatedly manipulate the invitor reward distribution mechanism. The attacker inflated their staked ratio by calling the public bindInvitor() function multiple times, allowing the protocol to allocate portions of staked amounts to controlled invitor accounts. Each staking round distributed rewards while allocating the claimable reward back to the attacker.
Details
- Date
- Nov 17, 2022
- Kind
- Hack or exploit
- Method
- Reward Logic Flaw
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- BNB Chain
Reported by
Related incidents
New Free DAO 2022 · Hack or exploit · $1.2M
Ethereum Alarm Clock 2022 · Hack or exploit · $260K
Nimbus 2022 · Hack or exploit · $76K
Ethereum Alarm Clock 2022 · Hack or exploit · $260K
Nimbus 2022 · Hack or exploit · $76K
Cite this page
SwanBluechip, "UEarnPool hack, Nov 17, 2022: $16K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht7166610693/ (data as of 2026-11-01).