Hack history / 2026 / Hack or exploit
BitBay
Hack or exploit on Oct 9, 2026 · Withdrawal Logic Flaw
SOURCES AGREE ON DATE AND LOSS · 3 SOURCES
Lost
$15K
sources: $14K to $15K
Returned
none listed
as the sources state it
Rank
#2,193
among thefts by dollars lost
What happened
BitBay’s vault contained a vulnerability in _withdraw() that transferred the contract’s entire token balance whenever liquidity == 0, without restricting withdrawals to the user’s proportional entitlement. The attacker triggered this condition through reposition() and subsequently redeemed one minimal share unit, receiving approximately 14,838.47 DAI belonging to the vault
Details
- Date
- Oct 9, 2026
- Kind
- Hack or exploit
- Method
- Withdrawal Logic Flaw
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Polygon
Reported by
Related incidents
TAC 2026 · Hack or exploit · $7.5M
Sweat Foundation 2026 · Hack or exploit · $3.5M
Maya Protocol 2026 · Hack or exploit · $1.7M
Allbridge Core 2026 · Hack or exploit · $1.6M
Aftermath Perps 2026 · Hack or exploit · $1.1M
Sweat Foundation 2026 · Hack or exploit · $3.5M
Maya Protocol 2026 · Hack or exploit · $1.7M
Allbridge Core 2026 · Hack or exploit · $1.6M
Aftermath Perps 2026 · Hack or exploit · $1.1M
Cite this page
SwanBluechip, "BitBay hack, Oct 9, 2026: $15K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht6d2d93a5c0/ (data as of 2026-10-31).