Hack history / 2021 / Hack or exploit
NEKO
Hack or exploit on Aug 13, 2021 · Improper Access Control
SOURCES AGREE ON DATE AND LOSS · 2 SOURCES
Lost
$2.2M
dollars at the time
Returned
none listed
as the sources state it
Rank
#665
among thefts by dollars lost
What happened
On August 13, 2021, Neko Network's MainPool smart contract was exploited via an improper access control vulnerability. The attacker exploited a mismatch between the account being mortgaged for a loan (onBehalfOf) and the account receiving borrowed funds, allowing them to mortgage other users' assets while receiving funds to their own address, stealing over $2.2M in stablecoins.
Details
- Date
- Aug 13, 2021
- Kind
- Hack or exploit
- Method
- Improper Access Control
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- BNB Chain
After the theft
- Frozen
- yes, amount not stated
“All asset pools on the Neko Network have been frozen to avoid changes.” (SlowMist Hacked)
Reported by
Related incidents
Poly Network 2021 · Hack or exploit · $611M
Mirror 2021 · Hack or exploit · $90M
ValueDefi 2021 · Hack or exploit · $10M
DAO Maker Vesting 2021 · Hack or exploit · $7M
DAO Maker Vesting 2021 · Hack or exploit · $4M
Mirror 2021 · Hack or exploit · $90M
ValueDefi 2021 · Hack or exploit · $10M
DAO Maker Vesting 2021 · Hack or exploit · $7M
DAO Maker Vesting 2021 · Hack or exploit · $4M
Cite this page
SwanBluechip, "NEKO hack, Aug 13, 2021: $2.2M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht9fbaf89eec/ (data as of 2026-10-31).