Hack history / 2022 / Hack or exploit
Cashio
Hack or exploit on Mar 23, 2022 · Missing Input Validation
SOURCES AGREE ON DATE AND LOSS · 4 SOURCES
Lost
$52M
dollars at the time
Returned
$14.1M
27% of the loss, as a source states it
Rank
#100
among thefts by dollars lost
What happened
Cashio's infinite-mint bug arose from two missing account-validation checks in the collateral deposit path, letting attackers use fake tokens as Saber LP collateral. ~2 billion CASH were minted and swapped for ~$52.8M in USDC, USDT and UST; CASH crashed to $0.00005.
Details
- Date
- Mar 23, 2022
- Kind
- Hack or exploit
- Method
- Missing Input Validation
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Solana
- Audit (rekt.news)
- unaudited
After the theft
- Recovered or frozen
- $14.1M
“$52.0M taken, $37.9M after recovery or freezing” (Web3 Is Going Great)
Related incidents
Qubit 2022 · Hack or exploit · $80M
Transit Swap 2022 · Hack or exploit · $24.9M
Team Finance 2022 · Hack or exploit · $15.2M
Superfluid 2022 · Hack or exploit · $8.7M
Meter 2022 · Hack or exploit · $4.3M
Transit Swap 2022 · Hack or exploit · $24.9M
Team Finance 2022 · Hack or exploit · $15.2M
Superfluid 2022 · Hack or exploit · $8.7M
Meter 2022 · Hack or exploit · $4.3M
Cite this page
SwanBluechip, "Cashio hack, Mar 23, 2022: $52M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht6dc7c20001/ (data as of 2026-10-31).