Hack history / 2021 / Hack or exploit
Rari Capital
Hack or exploit on May 8, 2021 · Arbitrary External Call
SOURCES DISAGREE ON DATE OR LOSS · 5 SOURCES
Lost
$14M
sources: $10M to $15M
Returned
none listed
as the sources state it
Rank
#245
among thefts by dollars lost
What happened
On May 8, 2021, attacker exploited Rari's ibETH integration; using dYdX flashloan and ibETH.work's arbitrary call capability, attacker artificially inflated ibETH.totalETH() to withdraw more ETH than deposited, draining ~$11M from Rari's Ethereum Pool.
Details
- Date
- May 8, 2021
- Kind
- Hack or exploit
- Method
- Arbitrary External Call
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
- Audit (rekt.news)
- Quantstamp
Related incidents
Rari Capital 2025 · Hack or exploit · $2M
RARI Foundation 2024 · Hack or exploit · undisclosed
BlockTower Capital 2024 · Fraud · undisclosed
Velvet Capital 2024 · Hack or exploit · undisclosed
Grayscale Capital 2024 · Hack or exploit · undisclosed
RARI Foundation 2024 · Hack or exploit · undisclosed
BlockTower Capital 2024 · Fraud · undisclosed
Velvet Capital 2024 · Hack or exploit · undisclosed
Grayscale Capital 2024 · Hack or exploit · undisclosed
Cite this page
SwanBluechip, "Rari Capital hack, May 8, 2021: $14M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht1239db633e/ (data as of 2026-10-31).