Hack history / 2026 / Hack or exploit
MakerDAOFlipKeeper
Hack or exploit on Oct 6, 2026 · the dormant ETH-A flip-keeper proxy's drain selector has no ds-auth check, so anyone can call it to make the keeper vat.hope() a caller-supplied worker and then deal its four undealt 2020 ETH-A auctions and flux/exit the freed 200 WETH of collateral out
ONE SOURCE · 1 SOURCE
Lost
$1.1M
dollars at the time
Returned
none listed
as the sources state it
Rank
#904
among thefts by dollars lost
What happened
No description from DefiLlama or SlowMist; see the sources below.
Details
- Date
- Oct 6, 2026
- Kind
- Hack or exploit
- Method
- the dormant ETH-A flip-keeper proxy's drain selector has no ds-auth check, so anyone can call it to make the keeper vat.hope() a caller-supplied worker and then deal its four undealt 2020 ETH-A auctions and flux/exit the freed 200 WETH of collateral out
- How in
- Smart contract bug
- Target
- not stated
- Chains
- not stated
Reported by
- DeFiHackLabs exploit reproduction only
Cite this page
SwanBluechip, "MakerDAOFlipKeeper hack, Oct 6, 2026: $1.1M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht34859c04ae/ (data as of 2026-10-31).