Gelato Network
Hack or exploit on Dec 11, 2021 · Contract Vulnerability
What happened
Smart contract automation tool Gelato Network tweeted: "We have been alerted to a critical vulnerability in Sorbet Finance's G-UNI router contract. This vulnerability only affects users interacting with the Sorbet UI." Gelato Network released a security incident investigation report, saying that white hat hackers transferred a total of $27 million in assets to ensure the safety of user assets, but there were still $744,000 of funds that were maliciously attacked by MEV. The project stated that the vulnerability that emerged this time is similar to the previous dydx vulnerability, and the smart contract at risk can make arbitrary low-level calls aimed at executing transactions on 1inch, making potential exploits possible.
Details
- Date
- Dec 11, 2021
- Kind
- Hack or exploit
- Method
- Contract Vulnerability
- How in
- Smart contract bug
- Target
- not stated
- Chains
- Ethereum
Reported by
Related incidents
pNetwork 2021 · Hack or exploit · $12M
bEarn Fi 2021 · Hack or exploit · $11M
Visor Finance 2021 · Hack or exploit · $8.2M
PIZZA 2021 · Hack or exploit · $500K
SwanBluechip, "Gelato Network hack, Dec 11, 2021: $744K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht793af74b1d/ (data as of 2026-11-01).