Tools Crypto Exploit Tracker exploit-0150
Exploit record
Legacy auction keeper loses 200 ETH through exposed permissions
- Loss
- $543k
- Attack vector
- Access Control
- Chain
- Ethereum
- Sector
- DeFi
What happened
A third-party keeper for old MakerDAO ETH-A auctions lost 200 ETH on 6 October. CertiK values the loss at about $542,982 at the time of the transaction.
An unprotected function let an attacker delegate the keeper’s account permissions to an attacker-controlled adapter. The attacker then settled four auctions dating from 2020 and withdrew their collateral. CertiK locates the flaw in the third-party keeper contract.
On-chain references
- Incident transactionetherscan.io/tx/0xbb6940f7c2a1e68cafbae7bb9b94d09af9af06ec3a…
Sources
- CertiK transaction analysiswww-cn.certik.com/blog/makerdao-legacy-auction-keeper-incide…
One record from the Crypto Exploit Tracker, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 20 October 2026