Hack history / 2022 / Hack or exploit
Brahma Finance
Hack or exploit on Nov 9, 2022 · Arbitrary External Call
ONE SOURCE · 1 SOURCE
Lost
$89K
dollars at the time
Returned
none listed
as the sources state it
Rank
#1,776
among thefts by dollars lost
What happened
On November 9, 2022, Brahma Finance's TopGear vault on Ethereum was exploited via an arbitrary external call vulnerability in the Zapper contract, where the swapTarget parameter was not validated, allowing an attacker to construct malicious call data and drain 89,343 USDC from three authorized user accounts.
Details
- Date
- Nov 9, 2022
- Kind
- Hack or exploit
- Method
- Arbitrary External Call
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
Reported by
Related incidents
Cite this page
SwanBluechip, "Brahma Finance hack, Nov 9, 2022: $89K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht8daaeb1472/ (data as of 2026-10-31).