OpenOcean Finance

Quick Summary

On February 11, 2025, OpenOcean detected an attack on its newly launched Limit Order contract on Base. The issue was immediately
mitigated by pausing the affected contract and deploying a more secure implementation. User funds remain safe, and no revoke
actions are needed. Affected users (total loss: $22K) are being notified and assisted.




Details of the Exploit

The exploit targeted a vulnerability in OpenOcean’s Limit Order contract on Base, but was quickly neutralized when the team paused
the contract, preventing any further malicious activity. Since the proxy contract remained under OpenOcean’s control, the hacker
was unable to drain additional funds. Some mistakenly interpreted the attacker’s post-exploit trading activity as further attacks,
but OpenOcean confirmed that these transactions were unrelated to its contracts.