Hack history / 2026 / Hack or exploit
Juicebox V3
Hack or exploit on Apr 20, 2026 · Missing Input Validation
ATTACK TX CONFIRMED ON CHAINSOURCES AGREE ON DATE AND LOSS · 3 SOURCES
Lost
$52K
dollars at the time
Returned
none listed
as the sources state it
Rank
#1,908
among thefts by dollars lost
What happened
On April 20, 2026, Juicebox V3 REVLoans was exploited for 21.77 ETH (~$52,000). Attacker exploited unvalidated source struct in borrowFrom to forge accounting context; by matching forged and destination currencies, attacker bypassed oracle and priced loan against inflated share price using attacker-controlled decimals.
Details
- Date
- Apr 20, 2026
- Kind
- Hack or exploit
- Method
- Missing Input Validation
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
Reported by
Related incidents
Cite this page
SwanBluechip, "Juicebox V3 hack, Apr 20, 2026: $52K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht58a45ae76b/ (data as of 2026-11-01).