PRXVT exploit analysis
PRXVT's business-logic flaw let the attacker route a `skim` call against the in-pair reserve and walk the freed balance out. DeFiHackLabs reconstructs about 32.8 ETH drained.
- Reported loss
- 32.8 ETH, per DeFiHackLabs
- Occurred
- Logged
- Source
- DeFiHackLabs
Logged as “2026-01-01: Bussiness Logic Flaw on PRXVT”.
Analysis1 min read
PRXVT was the same PRXVT "business logic flaw" that the renamed record 69 once covered; it carried a stale anchor in the corpus. The current canonical PRXVT entry exposes the same skim path against the in-pair balance that let the attacker claim the in-pair reserve.
DeFiHackLabs reconstructs the sequence against the live Base state; the drain is in 0xf42a8fe556d5e4ab59b0b7675ccbcd1425e7e2a6a8e0c9775fc6cd7c48ff55a1 on Base via CertiK Skylens for a total loss of about 32.8 ETH.
What would have prevented it: a restricted skim that pins the receiver to a deployer-allowlist, or an explicit min-reserve guard.
Sources read (3)
Other exploits
- MTToken exploit analysis 12 Jan 2026
- FutureSwap exploit analysis 10 Jan 2026
- Truebit exploit analysis 9 Jan 2026
- Flare Network exploit analysis $8.5M
Query every incident yourself — free, no signup
Updated 14 Oct 2026. Figures are as reported by the sources listed above and are not independently verified.
The crypto data layer for humans, apps, and AI agents.
