TesseraSwap

May 18, 2026

Target

DeFi

Classification

Protocol Logic

Technique

Callback Repayment Price Spread

Attribution

Unknown

Chains

Event timeline

1. May 18, 2026
   Exploit executed — $20K drained via callback repayment price spread
2. Attributed to Unknown
3. Recovery status Unrecovered 0%

Sources

• github.com/SunWeb3Sec/DeFiHackLabs/blob/main/src/test/2026-05/TesseraSwap_exp.sol

Data credits

• DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)

Related incidents

Apr 22, 2018

BCBeauty Chain

$900M

Apr 1, 2026

Drift Trade

$295M

Feb 9, 2024

PlayDapp

$290M