Introduction

On June 8th 2022, Osmosis confirmed that some of liquidity pools had been attacked and lost in the size of ~$5M.

The upgrade that contained the exploited bug occurred at block height 4707300, and the chain was halted at block 4713064.

This dashboard investigates the amount of assets that have been deposited and withdrawn in this period.

Analysis

Attackers

The graph below shows the volume of assets (in USD) that was exploited from polls by attackers.

We can see that the major amount has been removed by two ssets.

In total 4,65M$ has been removed from pools by attackers.

The graph below shows the difference between joined amount and exited amount for each asset.

Table below lists the attackers with number of join and exit actions.

All depositors

The table blow lists all wallets that had joined at least a pool between the upgrade and network halt.

Conclusion

The data shows that more than 10M USD value of different assets has been joined into pools and in total about 15M USD value has been exited.

The attacked exploiting the bug succeeded to remove 4,65M $.