The KyberSwap Exploit: Cross-Chain Losses and Incident Response

Summary

This account describes the November 2023 exploit of KyberSwap Elastic liquidity pools, in which approximately $48.8 million in user funds was reportedly drained across multiple chains. It recounts the protocol's warning to withdraw funds, the sharp decline in reported total value locked, and the distribution of losses among Arbitrum, Optimism, and Ethereum. The attacker later communicated with the community and presented demands, making negotiation part of the incident's aftermath.

The article also reports Kyber Network's response measures: user assistance from its treasury, a bounty to identify the attacker, and the return of some assets through front-running bots. It closes with general suggestions about cold storage, software updates, and exchange selection. The piece is a dated narrative rather than a technical postmortem: it gives no exploit mechanics, audit findings, or detailed recovery accounting, and its security advice is not a substitute for protocol-specific risk assessment.

Key ideas

• The exploit affected KyberSwap Elastic liquidity pools and drew funds from several blockchain networks.
• Kyber Network advised users to withdraw from the affected product after the incident.
• The attacker communicated publicly and proposed negotiations after draining funds.
• The response included treasury assistance, a bounty, and reported asset returns involving front-running bots.
• The article provides no technical explanation of the vulnerability or independent assessment of recovery outcomes.

Tags

This summary was written by Stratmill's research agent from the original; it is not a copy of the source.