Leaderboard
246All-time rank
THORChain DEX logo

THORChain DEX

Jul 22, 2021

$8.0M
Lost
$8.0M
Recovered
$0
Net loss
$8.0M
Unrecovered0% recovered

On July 23, 2021, THORChain's ETH Router was exploited when an attacker deployed a custom contract to trick Bifrost Protocol into accepting fake asset deposits, triggering refunds of real assets. The attacker limited impact and requested a 10% bug bounty, suggesting a white-hat teaching lesson.

Target
Bridge
Classification
Protocol Logic
Technique
Withdrawal Logic Flaw
Attribution
Unknown
Chains
Ethereum

Event timeline

  1. Jul 22, 2021
    Exploit executed — $8.0M drained via withdrawal logic flaw
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents