Hack history / 2023 / Hack or exploit
EraLend
Hack or exploit on Jul 25, 2023 · Read-Only Reentrancy
IN REVIEWSOURCES AGREE ON DATE AND LOSS · 4 SOURCES
Lost
$3.4M
sources: $2.8M to $3.4M
Returned
none listed
as the sources state it
Rank
#555
among thefts by dollars lost
What happened
On July 25, 2023, EraLend on zkSync suffered a read-only reentrancy attack in code borrowed from SyncSwap, where an attacker repeatedly called a vulnerable function to manipulate asset prices via the internal oracle, draining $3.4M. Only USDC deposits were affected.
In review: possible duplicate within one source.
Details
- Date
- Jul 25, 2023
- Kind
- Hack or exploit
- Method
- Read-Only Reentrancy
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- zkSync Era, Ethereum
- Audit (rekt.news)
- out of scope
Related incidents
dForce Lending 2023 · Hack or exploit · $3.6M
Conic Finance 2023 · Hack or exploit · $3.2M
Sturdy V1 2023 · Hack or exploit · $788K
Conic Finance 2023 · Hack or exploit · $3.2M
Sturdy V1 2023 · Hack or exploit · $788K
Cite this page
SwanBluechip, "EraLend hack, Jul 25, 2023: $3.4M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htc2bcc2df1b/ (data as of 2026-11-01).