Hack history / 2023 / Rug pull
MERLIN DEX
Rug pull on Apr 25, 2023 · Admin Drain
SOURCES AGREE ON DATE AND LOSS · 4 SOURCES
Lost
$1.8M
dollars at the time
Returned
none listed
as the sources state it
Rank
#726
among thefts by dollars lost
What happened
On April 25, 2023, zkSync DEX Merlin was exploited for $1.82 million. The attacker drained pools through the feeTo address in MerlinFactory which had unlimited asset transfer permissions and lacked multi-sig governance.
Details
- Date
- Apr 25, 2023
- Kind
- Rug pull
- Method
- Admin Drain
- How in
- Insiders: rug pulls, frauds, collapses
- Target
- DeFi protocol
- Chains
- zkSync Era, Ethereum
- Audit (rekt.news)
- Certik
Related incidents
Cite this page
SwanBluechip, "MERLIN DEX rug pull, Apr 25, 2023: $1.8M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht61d1fd6e52/ (data as of 2026-11-01).