Hack history / 2021 / Hack or exploit
Punk Protocol
Hack or exploit on Aug 10, 2021 · Delegatecall Hijack
IN REVIEWSOURCES DISAGREE ON DATE OR LOSS · 3 SOURCES
Lost
$8.9M
sources: $4M to $8.9M
Returned
none listed
as the sources state it
Rank
#326
among thefts by dollars lost
What happened
On August 10, 2021, Punk Protocol was exploited for $8.95M when attacker used delegatecall to rerun unguarded Initialize function, changing forge address to gain withdrawal control. White-hat frontran and recovered ~$5M, keeping $1M as finder's fee.
In review: sources disagree on the loss.
Details
- Date
- Aug 10, 2021
- Kind
- Hack or exploit
- Method
- Delegatecall Hijack
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
- Audit (rekt.news)
- unaudited
After the theft
- Recovered or seized
- $5M
“White-hat frontran and recovered ~$5M, keeping $1M as finder's fee.” (DefiLlama)
Reported by
Related incidents
Cite this page
SwanBluechip, "Punk Protocol hack, Aug 10, 2021: $8.9M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht141a88a7ab/ (data as of 2026-10-31).