Jimbos Protocol exploited for $7.5 million

Three days after the launch of its v2 protocol, the Arbitrum-based Jimbos Protocol was exploited for 4,090 ETH (~$7.5 million). The project had not properly controlled for slippage, which enabled an attacker to use a flash loan to manipulate the trading pairs on the project. The attacker then bridged the stolen funds to the Ethereum chain.

After the attack, Jimbos Protocol tweeted “We are aware of the exploit regarding our protocol and are actively in contact with law enforcement and security professionals. We will release further information when possible.” They also sent an on-chain message to the exploiter, offering to stop all investigations if the hacker returns 90% of the stolen funds.

• 
  “Jimbos Protocol exploited for $7.5 million three days after V2 launch”
  , The Block
• 
  Tweet by Jimbos Protocol
  
• 
  On-chain message