Hack history / 2026 / Hack or exploit
Alchemix yvWETH user position drained via malicious unverified-contract approval
Hack or exploit on Apr 29, 2026 · malicious-contract approval / arbitrary call execution (wallet drainer)
ONE SOURCE · 1 SOURCE
Lost
$1M
dollars at the time
Returned
none listed
as the sources state it
Rank
#891
among thefts by dollars lost
What happened
No description from DefiLlama or SlowMist; see the sources below.
Details
- Date
- Apr 29, 2026
- Kind
- Hack or exploit
- Method
- malicious-contract approval / arbitrary call execution (wallet drainer)
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
- Audit (ack3)
- unaudited
How sure: 0 of 4 checks what the checks mean
- Witnessesone source so far
- Same storyneeds a second source
- Blockchain receiptno public attack transaction checked
- Official wordno official statement linked
Who says what
Figure used: $1M, the figure ack3 H1 2026 dataset (CC BY 4.0) gives. Each source's own figure is in dollars at the time.
Related incidents
Unverified_a152 2026 · Hack or exploit · $229K
Unknown Stake Contract 2026 · Hack or exploit · $133K
Hyperliquid user loses $21 million to private key leak 2025 · Hack or exploit · $21M
Venus Protocol user exploited for $13.5 million; most funds later recovered 2025 · Hack or exploit · $13.5M
Unverified_6f7a 2025 · Hack or exploit · $8K
Unknown Stake Contract 2026 · Hack or exploit · $133K
Hyperliquid user loses $21 million to private key leak 2025 · Hack or exploit · $21M
Venus Protocol user exploited for $13.5 million; most funds later recovered 2025 · Hack or exploit · $13.5M
Unverified_6f7a 2025 · Hack or exploit · $8K
Cite this page
SwanBluechip, "Alchemix yvWETH user position drained via malicious unverified-contract approval hack, Apr 29, 2026: $1M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht4965659c9a/ (data as of 2026-11-01).