Clober Liquidity Vault
Last changed 2026-10-27 · Score recalculated — Rescored under Scoring v2, the published formula (avoid.net/scoring): 52 → 61. Problems weighed by who is responsible: incidents the subject suffered −12.4, concerns that are not fraud −3.2, problems around the subject, caused by others −0.6; legitimacy credit long-running +2; fact-check adjustments (+16) now shown as page reliability, not in the score. Version history →
Why this score
| Every page starts at | 65 |
| Concerns that are not fraud | -3.2 |
| Incidents it suffered (e.g. hacks) | -12.4 |
| Problems around it, caused by others | -0.6 |
| Long-running | +2 |
| Sum | 51 |
Score: 61/100 (kept between 0 and 100)
How scoring works →Summary
Clober Liquidity Vault is an automated market-making product built on top of CloberDEX, a fully on-chain central limit order book (CLOB) DEX deployed on Coinbase's Base network. On December 10, 2024, the Liquidity Vault suffered a reentrancy exploit that drained approximately 133.7 ETH (~$501,000) from the newly launched vault — one day after it received its first liquidity injection. The core CloberDEX protocol was unaffected, and the team offered a 20% white-hat bounty, which the attacker declined; funds were not recovered.
Connected Entities
8 entities · 60 linked investigations- Across Protocol→mentioned with→Binance(70%)
- Ethereum→mentioned with→Coinbase(60%)
- Across Protocol→mentioned with→Ethereum(70%)
- Clober Liquidity Vault→mentioned with→Base(70%)
- Clober Liquidity Vault→mentioned with→Starknet(65%)
- Clober Liquidity Vault→mentioned with→Binance(60%)
- Clober Liquidity Vault→mentioned with→Ethereum(80%)
- Starknet→mentioned with→Ethereum(80%)
- Clober Liquidity Vault→mentioned with→Coinbase(65%)
- Binance→mentioned with→Ethereum(65%)
- + 7 more
Timeline(7 events)
2 January 2023
Spearbit begins security audit of Clober DEX core contracts; engagement runs through January 13, 2023. All critical and high findings reported as fixed.
Cantina / Spearbit audit portfolio4 December 2024
Wallet address 0x012Fc637... exploits ZeroLend's MAHA Lending Pool for approximately $77,000 — six days before the Clober exploit.
CertiK — Clober Dex Incident Analysis8 December 2024
Kupia Security completes audit of the Clober Liquidity Vault contracts, two days before the exploit.
Rekt News — Clober Dex9 December 2024
Clober Liquidity Vault receives its first liquidity injection from users.
Cryptopolitan — Clober liquidity vault exploited for 133 ETH10 December 2024
Attacker exploits reentrancy vulnerability in the Rebalancer contract's _burn() function, draining 133.7 ETH (~$501,000) from the Clober Liquidity Vault using a 267.4 ETH Morpho Blue flash loan and a malicious strategy contract. Stolen funds bridged to Ethereum via Across Protocol.
CertiK — Clober Dex Incident Analysis11 December 2024
Clober team publicly acknowledges the exploit via X, confirms core protocol is unaffected, and offers attacker a 20% white-hat bounty (~$100,200) with non-prosecution commitment. Team engages Match Systems for fund recovery efforts.
Cryptopolitan — Clober liquidity vault exploited for 133 ETH11 December 2024
Attacker declines bounty offer and retains stolen ETH. Funds not recovered.
Nominis — Crypto Security Incidents December 2024Decision Log
- slot 461962190 · hash A6nRhBu4eogcmcYcVbeCWMd5GyhU8EjgKJnW5quQTps6
- slot 445508107 · hash BmDXF4kdQnkx8Ba898hmkrdEUY6a9iabtvDfJ6Xuvmq5
- slot 443512464 · hash 37Wm4RucXB15jgraDWpYcuxYHbKnCBj8XQZqmwMZqLWD
- slot 443512461 · hash HCry5b1JACvztJqK9tTUchtUVqyfCLCk6MZogyyghVQ6
- slot 443508878 · hash 9aBdEqa7VY4mtsswqzm45TEipjfDMYAvazEYUVF2FLJx
- slot 443508874 · hash 7D44QZyr2ekoMmffyqbXmybkE2wgJW6RNV6DjPmNnnVi
- slot 423087959 · hash 5g3eCKv3AabC3jpc3Bz5jNaPb7yXg8tGQkXTCQmYcG6m
This investigation is cryptographically anchored to the Solana blockchain (7 decisions). 14 of 15 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:27 AM
last updated: 10/27/2026, 6:02:50 AM
5 viewsavoid.net — verified advice for a post-truth world