Leaderboard
953All-time rank
Renegade
May 10, 2026
$209K
Lost
$209K
Recovered
$209K
Net loss
$0
Full100% recovered
On May 10, 2026, Renegade V1 on Arbitrum was exploited for $209K via unprotected initializer function and proxy version counter desynchronization. Attacker injected malicious logic via delegatecall to drain 27 ERC-20 tokens; whitehat recovered ~$190K within 45 minutes.
How the exploit worked
View reproducible PoCUninitialized Proxy.
Lost: ~$209K
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Access Control
- Technique
- Uninitialized Proxy
- Attribution
- Unknown
- Chains
Arbitrum
Event timeline
- May 10, 2026Exploit executed — $209K drained via uninitialized proxy
- Attributed to Unknown
- Recovery status Full 100%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)