Hack history / 2024 / Hack or exploit
Omnipus
Hack or exploit on Sep 11, 2024 · Missing Input Validation
SOURCES AGREE ON DATE AND LOSS · 2 SOURCES
Lost
$30K
dollars at the time
Returned
none listed
as the sources state it
Rank
#2,041
among thefts by dollars lost
What happened
On September 11, 2024, Omnipus presale contracts were exploited for approximately $30,000 when a commented-out check in OAppSender.sol's payNative() function allowed attackers to bypass validation. The contract mistakenly refunded ETH to attackers who claimed overpayment, enabling unauthorized fund extraction.
Details
- Date
- Sep 11, 2024
- Kind
- Hack or exploit
- Method
- Missing Input Validation
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
After the theft
- Returned by the attacker
- yes, amount not stated
“The attack exploited a vulnerability in which the contracts mistakenly believed the attackers had sent too much ETH and refunded them.” (SlowMist Hacked)
Reported by
Related incidents
Hedgey 2024 · Hack or exploit · $44.7M
ThalaSwap 2024 · Hack or exploit · $25.5M
PrismaLST 2024 · Hack or exploit · $11.6M
DeltaPrime 2024 · Hack or exploit · $4.8M
Bungee 2024 · Hack or exploit · $3.3M
ThalaSwap 2024 · Hack or exploit · $25.5M
PrismaLST 2024 · Hack or exploit · $11.6M
DeltaPrime 2024 · Hack or exploit · $4.8M
Bungee 2024 · Hack or exploit · $3.3M
Cite this page
SwanBluechip, "Omnipus hack, Sep 11, 2024: $30K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htb468c92fa4/ (data as of 2026-11-01).