Hack history / 2022 / Hack or exploit
Qubit
Hack or exploit on Jan 27, 2022 · Missing Input Validation
ATTACK TX CONFIRMED ON CHAINSOURCES AGREE ON DATE AND LOSS · 5 SOURCES
Lost
$80M
dollars at the time
Returned
none listed
as the sources state it
Rank
#76
among thefts by dollars lost
What happened
On January 27-28, 2022 an attacker drained $80 million from Qubit Finance's QBridge cross-chain bridge by calling the deposit function with a zero address token and no ETH, exploiting improper use of call() instead of SafeERC20 verification to bypass input validation. The attacker minted 77,162 qXETH and borrowed $37.6M in wETH, $28.5M in BTC-B, and stablecoins.
Details
- Date
- Jan 27, 2022
- Kind
- Hack or exploit
- Method
- Missing Input Validation
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- BNB Chain, Ethereum
- Audit (rekt.news)
- unaudited
Related incidents
Cashio 2022 · Hack or exploit · $52M
Transit Swap 2022 · Hack or exploit · $24.9M
Team Finance 2022 · Hack or exploit · $15.2M
Superfluid 2022 · Hack or exploit · $8.7M
Meter 2022 · Hack or exploit · $4.3M
Transit Swap 2022 · Hack or exploit · $24.9M
Team Finance 2022 · Hack or exploit · $15.2M
Superfluid 2022 · Hack or exploit · $8.7M
Meter 2022 · Hack or exploit · $4.3M
Cite this page
SwanBluechip, "Qubit hack, Jan 27, 2022: $80M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht9096f122cf/ (data as of 2026-10-31).