Hack history / 2026 / Hack or exploit
Gyroscope
Hack or exploit on Jan 30, 2026 · Arbitrary input / cross-chain bridge exploit — attacker called BridgeToken() bridging 1 wei GYD to the token contract address itself with malicious calldata, triggering approve() to grant themselves unlimited GYD approval, then used transferFrom() to drain 6M GYD
ONE SOURCE · 1 SOURCE
Lost
$807K
dollars at the time
Returned
none listed
as the sources state it
Rank
#972
among thefts by dollars lost
What happened
No description from DefiLlama or SlowMist; see the sources below.
Details
- Date
- Jan 30, 2026
- Kind
- Hack or exploit
- Method
- Arbitrary input / cross-chain bridge exploit — attacker called BridgeToken() bridging 1 wei GYD to the token contract address itself with malicious calldata, triggering approve() to grant themselves unlimited GYD approval, then used transferFrom() to drain 6M GYD
- How in
- Bridge and cross-chain
- Target
- Bridge or cross-chain (source: DeFi Protocol)
- Chains
- Ethereum
- Audit (ack3)
- Nethermind (probably in scope), Trail of Bits (exploited code out of scope), Runtime Verification (exploited code out of scope)
How sure: 0 of 4 checks what the checks mean
- Witnessesone source so far
- Same storyneeds a second source
- Blockchain receiptno public attack transaction checked
- Official wordno official statement linked
Who says what
Figure used: $807K, the figure ack3 H1 2026 dataset (CC BY 4.0) gives. Each source's own figure is in dollars at the time.
Cite this page
SwanBluechip, "Gyroscope hack, Jan 30, 2026: $807K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht4f01b91eac/ (data as of 2026-11-01).