Hack history / 2026 / Hack or exploit
IPOR Fusion
Hack or exploit on Jan 6, 2026 · Arbitrary External Call
SOURCES AGREE ON DATE AND LOSS · 2 SOURCES
Lost
$336K
dollars at the time
Returned
$336K
100% of the loss, as a source states it
Rank
#1,277
among thefts by dollars lost
What happened
On January 6, 2026, Fusion PlasmaVault on Arbitrum was exploited via EIP-7702 delegation; missing instantWithdraw validation allowed malicious fuse contracts to execute arbitrary code and drain $336K USDC. ~$267K was moved to Tornado Cash.
Details
- Date
- Jan 6, 2026
- Kind
- Hack or exploit
- Method
- Arbitrary External Call
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Arbitrum
After the theft
- Recovered or seized
- yes, amount not stated
“On January 7, the IPOR team announced on X that the funds have been recovered, and a 10% bounty agreement has been reached with the white-hat party, which will be covered by the IPOR DAO.” (SlowMist Hacked)
Reported by
Related incidents
Fusion 2019 · Hack or exploit · $6.4M
Aquifer 2026 · Hack or exploit · $2.5M
Quant 2026 · Hack or exploit · $138K
ShapeShift FOX Colony 2026 · Hack or exploit · $133K
Custom sAVAX Rebalancer 2026 · Hack or exploit · $64K
Aquifer 2026 · Hack or exploit · $2.5M
Quant 2026 · Hack or exploit · $138K
ShapeShift FOX Colony 2026 · Hack or exploit · $133K
Custom sAVAX Rebalancer 2026 · Hack or exploit · $64K
Cite this page
SwanBluechip, "IPOR Fusion hack, Jan 6, 2026: $336K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht400be4188c/ (data as of 2026-10-31).