Hack history / 2026 / Hack or exploit
Dango
Hack or exploit on Apr 13, 2026 · Missing Input Validation
SOURCES AGREE ON DATE AND LOSS · 2 SOURCES
Lost
$1.9M
dollars at the time
Returned
$410K
22% of the loss, as a source states it
Rank
#713
among thefts by dollars lost
What happened
On April 13, 2026, Dango Protocol was exploited for $1.9M via missing validation on donation amounts. Attackers donated negative amounts to manipulate protocol balances, cashing out $410K before the team recovered $1.49M in tokens.
Details
- Date
- Apr 13, 2026
- Kind
- Hack or exploit
- Method
- Missing Input Validation
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Dango
After the theft
- Recovered or seized
- $1.5M
“Attackers donated negative amounts to manipulate protocol balances, cashing out $410K before the team recovered $1.49M in tokens.” (DefiLlama) - Returned by the attacker
- yes, amount not stated
“The DeFi project Dango released an update three hours after disclosing a security incident last night, stating that the white-hat hacker has fully returned the stolen funds and received a bug bounty.” (SlowMist Hacked) - Bounty paid
- yes, amount not stated
“The DeFi project Dango released an update three hours after disclosing a security incident last night, stating that the white-hat hacker has fully returned the stolen funds and received a bug bounty.” (SlowMist Hacked) - Victims reimbursed
- yes, amount not stated
“According to the earlier announcement, the attacker exploited a logic flaw in the insurance fund to steal USDC collateral.” (SlowMist Hacked)
Reported by
Related incidents
Cite this page
SwanBluechip, "Dango hack, Apr 13, 2026: $1.9M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht5122ae07f1/ (data as of 2026-11-01).