SwanBluechipHack historyBinance tracker
Hack history / 2021 / Hack or exploit

DODO AMM

Hack or exploit on Mar 8, 2021 · Improper Access Control

ATTACK TX CONFIRMED ON CHAININ REVIEWSOURCES DISAGREE ON DATE OR LOSS · 5 SOURCES
Lost
$3.8M
sources: $500K to $3.8M
Returned
$1.9M
50% of the loss, as a source states it
Rank
#533
among thefts by dollars lost

What happened

DODO's V2 Crowdpooling contract left init() callable after funding, allowing an attacker to reconfigure pools with worthless tokens and drain the real reserves. Around $3.8M was taken, but $3.1M was returned within a day as MEV bots captured most of the exploit profit.

In review: sources disagree on the loss.

Details

Date
Mar 8, 2021
Kind
Hack or exploit
Method
Improper Access Control
How in
Smart contract bug
Target
DeFi protocol
Chains
Ethereum
Audit (rekt.news)
unaudited

After the theft

Returned by the attacker
$3.1M
“Around $3.8M was taken, but $3.1M was returned within a day as MEV bots captured most of the exploit profit.” (DefiLlama)
Frozen
$200K
“In addition, funds worth approximately US$200,000 are frozen on the centralized exchange, and the remaining value of approximately US$500,000 is borne by the DODO team, and all funds will be returned within 24 hours.” (SlowMist Hacked)
Recovered or frozen
$1.9M
“$3.8M taken, $1.9M after recovery or freezing” (Web3 Is Going Great)

Reported by

Related incidents

Poly Network 2021 · Hack or exploit · $611M
Mirror 2021 · Hack or exploit · $90M
ValueDefi 2021 · Hack or exploit · $10M
DAO Maker Vesting 2021 · Hack or exploit · $7M
DAO Maker Vesting 2021 · Hack or exploit · $4M
Cite this pageSwanBluechip, "DODO AMM hack, Mar 8, 2021: $3.8M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht3ecec2cd2b/ (data as of 2026-10-31).
Open in the full listAll incidents