Hack history / 2022 / Hack or exploit
Rabby
Hack or exploit on Oct 11, 2022 · Contract Vulnerability
SOURCES AGREE ON DATE AND LOSS · 3 SOURCES
Lost
$190K
dollars at the time
Returned
none listed
as the sources state it
Rank
#1,511
among thefts by dollars lost
What happened
DeBank plug-in wallet Rabby tweeted that its Rabby Swap smart contract has a vulnerability, and users who have used it should revoke Rabby Swap approvals on all chains as soon as possible. According to the analysis of the SlowMist security team, the Rabby Swap contract was attacked, and the token exchange function in the contract was directly called externally through the functionCallWithValue function in the OpenZeppelin Address library. The parameters passed in by the user are not checked, resulting in any external call problems. Attackers exploit this issue to steal funds from users authorized by this contract.
Details
- Date
- Oct 11, 2022
- Kind
- Hack or exploit
- Method
- Contract Vulnerability
- How in
- Smart contract bug
- Target
- Wallet
- Chains
- Ethereum
Reported by
Related incidents
Akutars 2022 · Hack or exploit · $34M
MEV Bots 2022 · Hack or exploit · $1.5M
Bitkeep Swap 2022 · Hack or exploit · $1.2M
Dogechain 2022 · Hack or exploit · $600K
Marvin Inu 2022 · Hack or exploit · $328K
MEV Bots 2022 · Hack or exploit · $1.5M
Bitkeep Swap 2022 · Hack or exploit · $1.2M
Dogechain 2022 · Hack or exploit · $600K
Marvin Inu 2022 · Hack or exploit · $328K
Cite this page
SwanBluechip, "Rabby hack, Oct 11, 2022: $190K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht5c3c197bfe/ (data as of 2026-10-31).