Hack history / 2026 / Hack or exploit
CheckoutPool
Hack or exploit on Mar 16, 2026 · Improper Access Control
ATTACK TX CONFIRMED ON CHAINSOURCES AGREE ON DATE AND LOSS · 2 SOURCES
Lost
$86K
dollars at the time
Returned
none listed
as the sources state it
Rank
#1,784
among thefts by dollars lost
What happened
Fun.xyz's legacy CheckoutPool contract on Polygon exposed a bridge() function without access control or recipient binding, allowing attackers to redirect execution into trusted settlement paths and drain funds to attacker-controlled accounts.
Details
- Date
- Mar 16, 2026
- Kind
- Hack or exploit
- Method
- Improper Access Control
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Polygon
Reported by
Related incidents
SUPERFORTUNE AI 2026 · Hack or exploit · $15.2M
Crypto DAO 2026 · Hack or exploit · $8.2M
Coinsbuy 2026 · Hack or exploit · $7.9M
New Market Trading 2026 · Hack or exploit · $4M
MANTRA Chain 2026 · Hack or exploit · $3.6M
Crypto DAO 2026 · Hack or exploit · $8.2M
Coinsbuy 2026 · Hack or exploit · $7.9M
New Market Trading 2026 · Hack or exploit · $4M
MANTRA Chain 2026 · Hack or exploit · $3.6M
Cite this page
SwanBluechip, "CheckoutPool hack, Mar 16, 2026: $86K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht900d960641/ (data as of 2026-11-01).