Hack history / 2023 / Hack or exploit
Hashflow
Hack or exploit on Jun 15, 2023 · Token Approval Abuse
SOURCES AGREE ON DATE AND LOSS · 2 SOURCES
Lost
$605K
dollars at the time
Returned
none listed
as the sources state it
Rank
#1,080
among thefts by dollars lost
What happened
A vulnerable function in Hashflow's contract allowed attackers to trigger transferFrom() on approved user tokens. The attacker exploited an approve-related issue across five chains, draining approximately $605K. The white-hat nature of the attack was later confirmed, and a recovery function was provided by the attacker, with Hashflow committing to compensating all affected users.
Details
- Date
- Jun 15, 2023
- Kind
- Hack or exploit
- Method
- Token Approval Abuse
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum, Arbitrum, Avalanche, BNB Chain, Polygon
Reported by
Related incidents
MetaPoint 2023 · Hack or exploit · $820K
Hector Lending 2023 · Hack or exploit · $653K
Unibot 2023 · Hack or exploit · $640K
CivFund 2023 · Hack or exploit · $180K
Ara Finance 2023 · Hack or exploit · $125K
Hector Lending 2023 · Hack or exploit · $653K
Unibot 2023 · Hack or exploit · $640K
CivFund 2023 · Hack or exploit · $180K
Ara Finance 2023 · Hack or exploit · $125K
Cite this page
SwanBluechip, "Hashflow hack, Jun 15, 2023: $605K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht283f0128b2/ (data as of 2026-10-31).