Hack history / 2021 / Hack or exploit
THORChain DEX
Hack or exploit on Jul 22, 2021 · Withdrawal Logic Flaw
IN REVIEWSOURCES AGREE ON DATE AND LOSS · 3 SOURCES
Lost
$8M
dollars at the time
Returned
none listed
as the sources state it
Rank
#351
among thefts by dollars lost
What happened
On July 23, 2021, THORChain's ETH Router was exploited when an attacker deployed a custom contract to trick Bifrost Protocol into accepting fake asset deposits, triggering refunds of real assets. The attacker limited impact and requested a 10% bug bounty, suggesting a white-hat teaching lesson.
In review: possible duplicate within one source.
Details
- Date
- Jul 22, 2021
- Kind
- Hack or exploit
- Method
- Withdrawal Logic Flaw
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
- Audit (rekt.news)
- THORChain
Reported by
Related incidents
THORChain DEX 2026 · Hack or exploit · $10.7M
Thorchain founder exploited for $1.35 million 2025 · Hack or exploit · $1.4M
THORChain 2022 · Hack or exploit · undisclosed
THORChain 2021 · Phishing · $76K
THORChain DEX 2021 · Hack or exploit · $5M
Thorchain founder exploited for $1.35 million 2025 · Hack or exploit · $1.4M
THORChain 2022 · Hack or exploit · undisclosed
THORChain 2021 · Phishing · $76K
THORChain DEX 2021 · Hack or exploit · $5M
Cite this page
SwanBluechip, "THORChain DEX hack, Jul 22, 2021: $8M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht5445c855d4/ (data as of 2026-10-31).