Liquidity Pool Drain

A liquidity pool drain occurs when an attacker removes all or most of the assets from a decentralized exchange's liquidity pool. This is typically done by exploiting a vulnerability in the pool's smart contract code, such as a reentrancy bug or an incorrect math implementation.

Once the pool is drained, the assets are transferred to the attacker's wallet, leaving liquidity providers with worthless tokens. This is the ultimate failure state for a liquidity protocol.

Preventing this requires rigorous smart contract audits, formal verification, and the implementation of circuit breakers that can pause activity if unusual outflow patterns are detected. It represents a total loss of confidence in the affected protocol.