Hack history / 2025 / Hack or exploit
Hegic(old contract)
Hack or exploit on Mar 1, 2025 · Withdrawal Logic Flaw
ONE SOURCE · 1 SOURCE
Lost
$80K
dollars at the time
Returned
none listed
as the sources state it
Rank
#1,803
among thefts by dollars lost
What happened
A deprecated Hegic WBTC Puts Pool contract (deployed January 4, 2022) was drained through its unprotected withdrawWithoutHedge() path, which did not decrement share balances. The attacker deposited liquidity, bought put options, withdrew the liquidity, then exercised the options.
Details
- Date
- Mar 1, 2025
- Kind
- Hack or exploit
- Method
- Withdrawal Logic Flaw
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
Reported by
Related incidents
Unknown Stake Contract 2026 · Hack or exploit · $133K
CryptoPunk sells for a fraction of its likely market price due to zombie smart contract 2024 · Costly mistake or other · $1.4M
OMPx Contract 2024 · Hack or exploit · $12K
Contract_0x7657 2023 · Hack or exploit · $20K
Hacker pulls $1 million from defi project, then destroys contract without withdrawing the funds 2022 · Hack or exploit · $1M
CryptoPunk sells for a fraction of its likely market price due to zombie smart contract 2024 · Costly mistake or other · $1.4M
OMPx Contract 2024 · Hack or exploit · $12K
Contract_0x7657 2023 · Hack or exploit · $20K
Hacker pulls $1 million from defi project, then destroys contract without withdrawing the funds 2022 · Hack or exploit · $1M
Cite this page
SwanBluechip, "Hegic(old contract) hack, Mar 1, 2025: $80K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht6236db71a6/ (data as of 2026-10-31).