Skip to content
Risks & Security

Exploit

Smart Contract Exploit

Attack exploiting smart contract vulnerabilities to steal funds or cause damage

Definition

An exploit is an attack that takes advantage of vulnerabilities in smart contracts or protocols to steal funds, manipulate prices, or disrupt operations.

Exploit (Smart Contract Exploit) is a risk term used to understand Attack exploiting smart contract vulnerabilities to steal funds or cause damage. In practice, it matters because it affects how users evaluate protocols, compare opportunities, and avoid hidden assumptions.

Example

The 2022 Wormhole exploit used a signature verification bug to mint 120,000 ETH illegitimately, draining the bridge's reserves.

1

How it works

In practice, the concept shows up like this: The 2022 Wormhole exploit used a signature verification bug to mint 120,000 ETH illegitimately, draining the bridge's reserves.

2

Why it matters

Exploit matters because small misunderstandings in DeFi can turn into bad pricing, liquidation, governance, custody, or smart-contract risk. A good mental model helps you compare protocols without relying on marketing language.

3

What to check

Treat it as a risk term: identify the failure mode, who can be harmed, and what evidence would reduce that risk. The main checks are: Fund loss; Protocol damage; Market disruption.

Risks to Consider

  • Fund loss
  • Protocol damage
  • Market disruption

Common Questions

What does Exploit mean in DeFi?

Exploit means Attack exploiting smart contract vulnerabilities to steal funds or cause damage. The useful question is not only the definition, but how the mechanism changes risk, return, liquidity, or governance for the user.

How is Exploit used in practice?

A practical example: The 2022 Wormhole exploit used a signature verification bug to mint 120,000 ETH illegitimately, draining the bridge's reserves.

What should I check before relying on Exploit?

Check fund loss, protocol damage, market disruption. Also verify liquidity, oracle assumptions, admin controls, and whether the protocol has been tested during stressed markets.