Hack history / 2022 / Hack or exploit
Transit Swap
Hack or exploit on Oct 1, 2022 · Missing Input Validation
ATTACK TX CONFIRMED ON CHAINSOURCES DISAGREE ON DATE OR LOSS · 5 SOURCES
Lost
$24.9M
sources: $21M to $28.9M
Returned
$15M
60% of the loss, as a source states it
Rank
#181
among thefts by dollars lost
What happened
On 2022-10-02 an attacker exploited a missing payer check in Transit Swap's claimTokens function, pulling tokens from any wallet with an approval to the contract across Ethereum and BSC. Transit Swap lost $28.9 million; the attacker was traced and returned funds the following day.
Details
- Date
- Oct 1, 2022
- Kind
- Hack or exploit
- Method
- Missing Input Validation
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum, BNB Chain
- Audit (rekt.news)
- out of scope
After the theft
- Returned by the attacker
- $1.9M
“The largest attacker had returned 6,500 BNB (about $1.95 million) on October 10, and on October 13, the attackers returned 3,485 BNB (about $950,000).” (SlowMist Hacked) - Recovered or frozen
- $15M
“$21.0M taken, $6.0M after recovery or freezing” (Web3 Is Going Great)
Related incidents
Transit Finance 2026 · Hack or exploit · $1.9M
Transit Finance 2026 · Hack or exploit · $258K
CoW Swap 2026 · Hack or exploit · $1.2M
Trader loses almost $50 million in Aave swap gone wrong 2026 · Costly mistake or other · $50M
1inch Swap 2025 · Hack or exploit · $5M
Transit Finance 2026 · Hack or exploit · $258K
CoW Swap 2026 · Hack or exploit · $1.2M
Trader loses almost $50 million in Aave swap gone wrong 2026 · Costly mistake or other · $50M
1inch Swap 2025 · Hack or exploit · $5M
Cite this page
SwanBluechip, "Transit Swap hack, Oct 1, 2022: $24.9M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht11b00d2ab7/ (data as of 2026-10-31).