Incident reportSmart-contract exploitEthereum
Euler Finance −$197M
They stole $197 million, then said sorry and sent it back.
What happened
A flaw in a lending function let an attacker use flash loans to drain about $197 million from the lending protocol Euler.
Timeline
Mar 13
Euler is drained in a series of flash-loan transactions.
Mar 18
The attacker begins returning funds and posts an on-chain apology.
Apr 2023
Euler says the recoverable funds are back.
Aftermath
Nearly everything came back, which almost never happens.
Date2023-03-13
Lost$197M
WhoA single attacker who later apologised
It was audited. Several times.
Lesson An audit is a photo, not a guarantee.