Hack history / 2024 / Hack or exploit
Dolomite
Hack or exploit on Mar 20, 2024 · Improper Access Control
SOURCES AGREE ON DATE AND LOSS · 3 SOURCES
Lost
$1.8M
dollars at the time
Returned
none listed
as the sources state it
Rank
#732
among thefts by dollars lost
What happened
An old Dolomite DEX contract on Ethereum (deployed 2019) was exploited via a reentrancy vulnerability. The attacker bypassed the noEntry reentrancy guard by calling the callFunction through the TradeManager contract, which lacked proper reentrancy protection, allowing recursive fund drainage from users who had approved the contract.
Details
- Date
- Mar 20, 2024
- Kind
- Hack or exploit
- Method
- Improper Access Control
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum, Arbitrum
After the theft
- Recovered or seized
- yes, amount not stated
“As of March 24th, Dolomite has recovered 90% of the assets taken by the attacker.” (SlowMist Hacked)
Related incidents
Casper Network 2024 · Hack or exploit · $6.7M
Hector Network 2024 · Hack or exploit · $2.7M
Vowcurrency 2024 · Hack or exploit · $1.2M
XBridge 2024 · Hack or exploit · $824K
Orion Protocol 2024 · Hack or exploit · $645K
Hector Network 2024 · Hack or exploit · $2.7M
Vowcurrency 2024 · Hack or exploit · $1.2M
XBridge 2024 · Hack or exploit · $824K
Orion Protocol 2024 · Hack or exploit · $645K
Cite this page
SwanBluechip, "Dolomite hack, Mar 20, 2024: $1.8M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht6b7cb636d4/ (data as of 2026-10-31).