Hack history / 2021 / Hack or exploit
ValueDefi
Hack or exploit on May 5, 2021 · Improper Access Control
IN REVIEWSOURCES DISAGREE ON DATE OR LOSS · 4 SOURCES
Lost
$10M
sources: $5.8M to $10M
Returned
none listed
as the sources state it
Rank
#306
among thefts by dollars lost
What happened
ValueDefi's vSwap pool on BSC was exploited via reinitialization vulnerability in access control. Attacker re-initialized pool, set themselves as operator, called governanceRecoverUnsupported() to drain 10,839.16 vBWAP/BUSD LP tokens and associated collateral.
In review: possible duplicate within one source; sources disagree on the loss.
Details
- Date
- May 5, 2021
- Kind
- Hack or exploit
- Method
- Improper Access Control
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- BNB Chain, Ethereum
- Audit (rekt.news)
- unaudited
After the theft
- Victims reimbursed
- yes, amount not stated
“The 2802.75 vBSWAP currently in the reserve fund and the 205,659.22 BUSD of the ValueDeFi deployer will be used to compensate all users in the pool.” (SlowMist Hacked)
Related incidents
ValueDefi 2021 · Hack or exploit · $11M
ValueDefi 2020 · Hack or exploit · $7.4M
Poly Network 2021 · Hack or exploit · $611M
Mirror 2021 · Hack or exploit · $90M
DAO Maker Vesting 2021 · Hack or exploit · $7M
ValueDefi 2020 · Hack or exploit · $7.4M
Poly Network 2021 · Hack or exploit · $611M
Mirror 2021 · Hack or exploit · $90M
DAO Maker Vesting 2021 · Hack or exploit · $7M
Cite this page
SwanBluechip, "ValueDefi hack, May 5, 2021: $10M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht0b0fe94bf6/ (data as of 2026-10-31).