Hack history / 2026 / Hack or exploit
Reddio RedSonic
Hack or exploit on Sep 5, 2026 · Incorrect Share Accounting
SOURCES AGREE ON DATE AND LOSS · 3 SOURCES
Lost
$23K
dollars at the time
Returned
none listed
as the sources state it
Rank
#2,105
among thefts by dollars lost
What happened
RedSonic’s permissionless registerErc20() allowed stETH to be registered as a separate vault asset even though the ETH vault’s rsvETH share price already counted the vault’s raw stETH balance through its Lido position. As a result, the same stETH balance simultaneously backed rsvETH and newly minted rsvstETH shares. The attacker deposited stETH to inflate the rsvETH share price, redeemed rsvETH against that inflated valuation, then redeemed rsvstETH to recover the same stETH collateral, effectively using one asset balance to support two share classes
Details
- Date
- Sep 5, 2026
- Kind
- Hack or exploit
- Method
- Incorrect Share Accounting
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
Reported by
Related incidents
Fence Finance 2026 · Hack or exploit · $1M
CometDEX 2026 · Hack or exploit · $717K
BCE-USDT liquidity pool 2026 · Hack or exploit · $679K
BlueMove DEX 2026 · Hack or exploit · $529K
mySwap CL 2026 · Hack or exploit · $305K
CometDEX 2026 · Hack or exploit · $717K
BCE-USDT liquidity pool 2026 · Hack or exploit · $679K
BlueMove DEX 2026 · Hack or exploit · $529K
mySwap CL 2026 · Hack or exploit · $305K
Cite this page
SwanBluechip, "Reddio RedSonic hack, Sep 5, 2026: $23K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht5433d87b1d/ (data as of 2026-10-31).