H1DR4 case preview
Flooring Protocol fpToken Inflation Exploit and Whitehat Rescue
On June 8, 2026, security researcher Quit (@0xQuit) reported a Flooring Protocol exploit where a dust amount of WETH was used to reach a near-unbounded fpToken balance and drain Flooring liquidity pools. The public thread describes a BT404-style packed accounting bug involving malicious token-id aliasing, ghost ownership state, unchecked arithmetic underflows in transfer and burn/unwrap paths, an opportunistic second wave of value extraction, and a coordinated whitehat recovery of exposed NFTs including BAYC, MAYC, CryptoPunks, Azuki, Elementals, Captains, Moonbird, and Doodles assets. Open questions: attacker addresses, affected pool list, exact loss/recovery delta, restitution path for re...
12 tips
$0 linked rewards
OPEN