Hack history / 2021 / Hack or exploit
xWin Finance
Hack or exploit on Jun 25, 2021 · Missing Input Validation
ATTACK TX CONFIRMED ON CHAINSOURCES AGREE ON DATE AND LOSS · 3 SOURCES
Lost
$282K
sources: $270K to $300K
Returned
none listed
as the sources state it
Rank
#1,351
among thefts by dollars lost
What happened
A flashloan attacker exploited invalid slippage control logic in xWin's reward distribution system, which did not properly validate transaction slippage limits. The attacker obtained a flashloan of 76,000 BNB, manipulated the swap price, and extracted 303,998 XWIN tokens by exploiting the broken slippage validation in the _swapBNBToTokens function.
Details
- Date
- Jun 25, 2021
- Kind
- Hack or exploit
- Method
- Missing Input Validation
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- BNB Chain
Reported by
Related incidents
Ref Finance 2021 · Hack or exploit · $3.2M
Growth DeFi 2021 · Hack or exploit · $1.4M
Glide Finance 2021 · Hack or exploit · $300K
88mph 2021 · Hack or exploit · undisclosed
Growth DeFi 2021 · Hack or exploit · $1.4M
Glide Finance 2021 · Hack or exploit · $300K
88mph 2021 · Hack or exploit · undisclosed
Cite this page
SwanBluechip, "xWin Finance hack, Jun 25, 2021: $282K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht1504f6267b/ (data as of 2026-10-31).