Hack history / 2026 / Hack or exploit
Quant
Hack or exploit on Apr 28, 2026 · Arbitrary External Call
ONE SOURCE · 1 SOURCE
Lost
$138K
dollars at the time
Returned
none listed
as the sources state it
Rank
#1,605
among thefts by dollars lost
What happened
A QNT reserve pool on Ethereum was drained of 1,988.5 QNT (~54.93 ETH, ~$138K) on 28 April 2026 via an EIP-7702 delegation chain: the pool's admin EOA delegated its code to a BatchExecutor which trusted an open, permissionless BatchCall helper; BatchCall.batch() had no caller check, allowing any address to execute arbitrary calls with admin authority.
Details
- Date
- Apr 28, 2026
- Kind
- Hack or exploit
- Method
- Arbitrary External Call
- How in
- Smart contract bug
- Target
- Token
- Chains
- Ethereum
Reported by
Related incidents
Aquifer 2026 · Hack or exploit · $2.5M
IPOR Fusion 2026 · Hack or exploit · $336K
ShapeShift FOX Colony 2026 · Hack or exploit · $133K
Custom sAVAX Rebalancer 2026 · Hack or exploit · $64K
ether.fi Liquid 2026 · Hack or exploit · $43K
IPOR Fusion 2026 · Hack or exploit · $336K
ShapeShift FOX Colony 2026 · Hack or exploit · $133K
Custom sAVAX Rebalancer 2026 · Hack or exploit · $64K
ether.fi Liquid 2026 · Hack or exploit · $43K
Cite this page
SwanBluechip, "Quant hack, Apr 28, 2026: $138K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht70b45aa0ae/ (data as of 2026-10-31).