Hack history / 2020 / Hack or exploit
Pickle
Hack or exploit on Nov 21, 2020 · Missing Input Validation
ATTACK TX CONFIRMED ON CHAINSOURCES AGREE ON DATE AND LOSS · 4 SOURCES
Lost
$19.7M
dollars at the time
Returned
none listed
as the sources state it
Rank
#213
among thefts by dollars lost
What happened
Pickle's ControllerV4.swapExactJarForJar function lacked jar whitelisting, allowing an attacker to create fake jars and siphon 19.76M DAI from the pDAI jar via missing input validation.
Details
- Date
- Nov 21, 2020
- Kind
- Hack or exploit
- Method
- Missing Input Validation
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
- Audit (rekt.news)
- unaudited
Reported by
Cite this page
SwanBluechip, "Pickle hack, Nov 21, 2020: $19.7M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht232e48d76d/ (data as of 2026-10-31).