Hack history / 2023 / Hack or exploit
KyberSwap Elastic
Hack or exploit on Nov 22, 2023 · Rounding Error
LEGAL ACTIONSOURCES AGREE ON DATE AND LOSS · 5 SOURCES
Lost
$51.4M
sources: $48M to $54.7M
Returned
$4.7M
9% of the loss, as a source states it
Rank
#101
among thefts by dollars lost
What happened
On November 22, 2023, KyberSwap Elastic was exploited via a double rounding error in computeSwapStep() that allowed the final swap price to exceed the target threshold without updating liquidity state. The attacker used strategic swaps to corrupt baseL and drain $48M across multiple networks.
Details
- Date
- Nov 22, 2023
- Kind
- Hack or exploit
- Method
- Rounding Error
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum, Base, Polygon, Optimism, Arbitrum
- Audit (rekt.news)
- ChainSecurity, Sherlock
After the theft
- Recovered or seized
- $508K
“On December 13th, the KyberSwap team recovered approximately $508,000 worth of funds from the owners of frontrun bots.” (SlowMist Hacked) - Returned by the attacker
- yes, amount not stated
“To date, the total amount of funds returned by the owners of frontrun bots is approximately $5.17 million.” (SlowMist Hacked) - Recovered or frozen
- $4.7M
“$54.7M taken, $50.0M after recovery or freezing” (Web3 Is Going Great)
Legal action
- 2025-02-03 · Charged · US DOJ: Canadian National Charged With Stealing Approximately $65 Million in Cryptocurrency From Two DeFi Protocols ↗
US Department of Justice press releases that name this incident. A charge is an allegation; defendants are presumed innocent unless proven guilty.
Related incidents
KyberSwap 2023 · Hack or exploit · undisclosed
KyberSwap Classic 2022 · Hack or exploit · $265K
Midas Capital 2023 · Hack or exploit · $600K
WiseLending 2023 · Hack or exploit · $260K
Tropykus RSK 2023 · Hack or exploit · $150K
KyberSwap Classic 2022 · Hack or exploit · $265K
Midas Capital 2023 · Hack or exploit · $600K
WiseLending 2023 · Hack or exploit · $260K
Tropykus RSK 2023 · Hack or exploit · $150K
Cite this page
SwanBluechip, "KyberSwap Elastic hack, Nov 22, 2023: $51.4M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht171a94ddc6/ (data as of 2026-11-01).