An attacker drained roughly $1.73 million from Notional Finance’s legacy escrow contract early Friday, exploiting a coding flaw that made an enormous fabricated debt register as zero.
The stolen DAI and USDC became about 689 ether (ETH). The funds then went through Tornado Cash, a service that breaks the trail between wallets. Notional has said nothing publicly.
Notional Finance is a fixed-rate lending protocol on Ethereum. Its first version recorded future cash obligations as tokens called fCash. The system screened borrowers for collateral before letting them add debt.
That screening converted debt into ether terms through a raw uint128 conversion. Two mints summed to exactly two raised to the power of 128. That is the single value the conversion flattens to zero, QuillAudits found.
A checked conversion would have rejected the figure instead of quietly dropping its digits. Notional used the safer method elsewhere in the same file, according to the write-up.
The account then read as debt free. Etherscan records show the setup landed at 11:58 p.m. UTC Thursday and the withdrawal three minutes later.
That second transaction moved 69,257 DAI and 1,658,524 USDC out of the escrow. The attacker also tipped block builder Titan 0.07 ETH to route the trade privately.
Security firm PeckShield relayed a warning from on-chain monitor Specter. The escrow now holds about $60,600 in leftover tokens.
Notional wound down its third version after the November 2025 Balancer exploit cascaded into its vaults. The V1 contracts stayed live and funded, and nobody swept them.
Independently audited protocols still account for most crypto hack losses, so an old review offered no cover here. June brought a close parallel, when an attacker drained legacy Solana pools at Raydium.
Notional’s NOTE token trades near $0.0065, up 3.5% over 24 hours, on a market value close to $400,700.
Notional had issued no statement, loss figure, or post-mortem at publication. Whether the drained cash belonged to users, the treasury, or a third party remains unconfirmed.
The post Notional Finance Hit by $1.7 Million Exploit From Integer Overflow Bug appeared first on BeInCrypto.
Key Takeaways: Kraken institutional clients will have access to 24/7 settlement in USD via Payward’s integration with SoFi’s Exchange Network. SoFiUSD is going to be
Anthropic’s massive capital raise highlights the escalating competition and investor confidence in the AI sector’s future growth potential. The post Anthropic has already raised $130
Zcash’s surge highlights the volatility and risk in crypto markets, emphasizing the potential for significant financial losses in short positions. The post Zcash hits $1,020,
As the CLARITY vote approaches, Coinbase emphasizes its importance for the crypto industry. The firm encourages followers to stay updated by following key influencers such
Blockchain Bodega is here and you know the vibes. We’re at the intersection of hip-hop culture and web3, exploring this new digital frontier. Who better to guide you through these uncharted lanes than Ock Chain – The Bitcoin Boss and the Consensus Corner Boys?
Ock Chain doesn’t just cook up random details about cryptocurrency; he lives it. Ock’s been deep in the game since Bitcoin was just a baby.
And let’s not forget about the Consensus Corner Boys. They’re our skilled crew of blockchain enthusiasts. They’re here to educate, entertain, and enlighten.
Welcome to Blockchain Bodega!
Copyright © 2023 Blockchain Bodega. All rights reserved.