Hack history / 2026 / Hack or exploit
RetoSwap
Hack or exploit on May 20, 2026 · Missing Input Validation
IN REVIEWSOURCES AGREE ON DATE AND LOSS · 3 SOURCES
Lost
$2.7M
dollars at the time
Returned
none listed
as the sources state it
Rank
#618
among thefts by dollars lost
What happened
On May 20, 2026, RetoSwap (Haveno fork on Monero) failed to verify ACK message sources. Attackers registered attacker-controlled addresses as arbitrators for multisig wallets, stealing $2.7M from traders.
In review: possible duplicate within one source.
Details
- Date
- May 20, 2026
- Kind
- Hack or exploit
- Method
- Missing Input Validation
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Monero, monero
Related incidents
Cite this page
SwanBluechip, "RetoSwap hack, May 20, 2026: $2.7M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht030f8c1d99/ (data as of 2026-10-31).