Hack history / 2023 / Hack or exploit
dForce Lending
Hack or exploit on Feb 9, 2023 · Read-Only Reentrancy
ATTACK TX CONFIRMED ON CHAININ REVIEWSOURCES DISAGREE ON DATE OR LOSS · 5 SOURCES
Lost
$3.6M
dollars at the time
Returned
$3.6M
100% of the loss, as a source states it
Rank
#536
among thefts by dollars lost
What happened
An attacker exploited read-only reentrancy in dForce's Curve vault integration on Arbitrum and Optimism. During asset withdrawal, the attacker called back into the protocol to manipulate Curve's virtual price and liquidate wstETH/ETH positions.
In review: possible duplicate within one source.
Details
- Date
- Feb 9, 2023
- Kind
- Hack or exploit
- Method
- Read-Only Reentrancy
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Arbitrum, Optimism, Ethereum
- Audit (rekt.news)
- out of scope
After the theft
- Returned by the attacker
- yes, amount not stated
“On February 13, dForce tweeted that the attackers had returned all stolen funds to the project multi-signature addresses on Arbitrum and Optimism, and all affected users would be compensated.” (SlowMist Hacked) - Victims reimbursed
- yes, amount not stated
“On February 13, dForce tweeted that the attackers had returned all stolen funds to the project multi-signature addresses on Arbitrum and Optimism, and all affected users would be compensated.” (SlowMist Hacked) - Recovered or frozen
- $3.6M
“$3.6M taken, $0K after recovery or freezing” (Web3 Is Going Great)
Related incidents
Secured Finance Lending 2026 · Hack or exploit · $104K
Moonwell Lending 2026 · Hack or exploit · $8.7M
Surf Lending 2026 · Hack or exploit · undisclosed
DefiTuna Lending 2026 · Hack or exploit · $580K
Fluid Lending 2026 · Hack or exploit · $215K
Moonwell Lending 2026 · Hack or exploit · $8.7M
Surf Lending 2026 · Hack or exploit · undisclosed
DefiTuna Lending 2026 · Hack or exploit · $580K
Fluid Lending 2026 · Hack or exploit · $215K
Cite this page
SwanBluechip, "dForce Lending hack, Feb 9, 2023: $3.6M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht60bc75fe03/ (data as of 2026-11-01).