SwanBluechipHack historyBinance tracker
Hack history / 2020 / Hack or exploit

Harvest Finance

Hack or exploit on Oct 26, 2020 · Spot Price Manipulation

ATTACK TX CONFIRMED ON CHAINSOURCES AGREE ON DATE AND LOSS · 4 SOURCES
Lost
$24M
sources: $21.5M to $24M
Returned
none listed
as the sources state it
Rank
#187
among thefts by dollars lost

What happened

Harvest Finance exploited October 26, 2020 for $24-34M via Curve oracle manipulation. Attacker deployed $50M flashloan to skew the Curve y-pool USDT/USDC balance, then repeatedly minted fTokens at depressed valuation and redeemed at normal price (~30 times in 7 minutes).

Details

Date
Oct 26, 2020
Kind
Hack or exploit
Method
Spot Price Manipulation
How in
Price, oracle and governance
Target
DeFi protocol
Chains
Ethereum
Audit (rekt.news)
Haechi, Peckshield

After the theft

Returned by the attacker
$2.5M
“The attacker returned $2,478,549.94 to Deployer in the form of USDT and USDC.” (SlowMist Hacked)
Victims reimbursed
yes, amount not stated
“Officials are using USDC, USDT, and GRAIN tokens for mixed compensation to help users who were previously affected by the attack to make claims.” (SlowMist Hacked)

Reported by

Related incidents

Harvest Keeper 2023 · Hack or exploit · $933K
Harvest 2023 · Hack or exploit · undisclosed
Eminence 2020 · Hack or exploit · $15M
Warp Protocol 2020 · Hack or exploit · $7.8M
ValueDefi 2020 · Hack or exploit · $7.4M
Cite this pageSwanBluechip, "Harvest Finance hack, Oct 26, 2020: $24M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht7162cd3cc6/ (data as of 2026-10-31).
Open in the full listAll incidents