Hack history / 2022 / Hack or exploit
Tinyman
Hack or exploit on Jan 1, 2022 · Incorrect Share Accounting
SOURCES DISAGREE ON DATE OR LOSS · 3 SOURCES
Lost
$3M
sources: $2M to $3M
Returned
none listed
as the sources state it
Rank
#603
among thefts by dollars lost
What happened
Tinyman's AMM pools were exploited via a vulnerability in the liquidity withdrawal mechanism. An attacker could receive the same token twice after a burn rather than two different tokens, extracting twice as much liquidity as authorized. The initial attack was imitated by others, with approximately $3M in losses and $2M in additional at-risk liquidity before the team urged removal from all pools.
Details
- Date
- Jan 1, 2022
- Kind
- Hack or exploit
- Method
- Incorrect Share Accounting
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Algorand
Related incidents
Flurry Finance 2022 · Hack or exploit · $293K
MooCAKECTX 2022 · Hack or exploit · $140K
Bad Guys by RPF 2022 · Hack or exploit · undisclosed
MooCAKECTX 2022 · Hack or exploit · $140K
Bad Guys by RPF 2022 · Hack or exploit · undisclosed
Cite this page
SwanBluechip, "Tinyman hack, Jan 1, 2022: $3M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht285c96ff05/ (data as of 2026-10-31).