Hack history / 2026 / Hack or exploit
Projekt
Hack or exploit on Jul 25, 2026 · Missing Input Validation
SOURCES AGREE ON DATE AND LOSS · 2 SOURCES
Lost
$560K
dollars at the time
Returned
none listed
as the sources state it
Rank
#1,108
among thefts by dollars lost
What happened
Projekt reward vault attacked July 25, 2026 for $560K via flashloan exploit. Attacker flash-loaned 14K WETH from Morpho to create fake purchase records in the unvalidated trackPurchase function, inflating reward allocations and draining ~301.7 ETH via massWithdraw.
Details
- Date
- Jul 25, 2026
- Kind
- Hack or exploit
- Method
- Missing Input Validation
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
Reported by
Related incidents
Cite this page
SwanBluechip, "Projekt hack, Jul 25, 2026: $560K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht7a971726a6/ (data as of 2026-10-31).