Hack history / 2022 / Hack or exploit
whaleswap.finance
Hack or exploit on Jun 21, 2022 · K value verification vulnerability
ONE SOURCE · 1 SOURCE
Lost
$12K
dollars at the time
Returned
none listed
as the sources state it
Rank
#2,232
among thefts by dollars lost
What happened
The whaleswap.finance project was attacked, and at least 5946 BUSD and 5964 USDT were lost. The reason may be that there is a problem with the K value verification of the whaleswap.finance Pair contract. Whenever the user exchanges, there is a problem with the parameter magnitude passed in the K value verification, which causes the K value verification to fail. The attacker first borrows a BSC-USD through a flash loan, and then returns the flash loan when the K value verification parameter is on the order of 10000^4. The parameter verification level used in the K value verification is 10000^2, which causes the K verification to fail.
Details
- Date
- Jun 21, 2022
- Kind
- Hack or exploit
- Method
- K value verification vulnerability
- How in
- Price, oracle and governance
- Target
- not stated
- Chains
- BNB Chain
Reported by
Cite this page
SwanBluechip, "whaleswap.finance hack, Jun 21, 2022: $12K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htb701aaec2e/ (data as of 2026-11-01).