ETH described the incident as a mix of configuration errors, slow coordination around multisig updates, and separate failures from its KYC partner, Sonar.
These issues combined to create a launch window that opened earlier than planned, blocked deposit attempts, and led to a rush of activity that filled the initial $250 million cap almost instantly
Once the team tried to lift the limit, new problems followed. A mismatched sale identifier in the pre-deposit contract required a 4-of-6 multisig fix, while Sonar’s rate limits caused extended downtime.
By the time fixes were deployed, the system reopened at a random moment, allowing users who kept refreshing the page to deposit before others even knew the window was live.
Attempts to expand the cap to $400 million and then $500 million came too late, with the contract already oversubscribed before each limit took effect.
These issues combined to create a launch window that opened earlier than planned, blocked deposit attempts, and led to a rush of activity that filled the initial $250 million cap almost instantly
Once the team tried to lift the limit, new problems followed. A mismatched sale identifier in the pre-deposit contract required a 4-of-6 multisig fix, while Sonar’s rate limits caused extended downtime.
By the time fixes were deployed, the system reopened at a random moment, allowing users who kept refreshing the page to deposit before others even knew the window was live.
Attempts to expand the cap to $400 million and then $500 million came too late, with the contract already oversubscribed before each limit took effect.