Attacker exploited a fee parameter error in Glide Finance's contract. The team had changed a fee parameter post-audit from 1,000 to 10,000 but failed to update the corresponding value in the contract code, leaving the incorrect parameter at 1,000 and allowing attackers to drain funds via incorrectly-calculated fees.

Glide Finance, a DeFi protocol built on the Elastos ecosystem, tweeted that a contract loophole was exploited to siphon money out of the matching contract for a loss of approximately $300,000 because the team changed the fee parameters after an audit but did not update the number on the contract from 1,000 to 10,000. The team is now contacting the exchange to block the transfer of funds and reminding users who have money in Glide's liquidity pool to withdraw funds.