Hack history / 2022 / Hack or exploit
Mirror
Hack or exploit on May 26, 2022 · Improper Access Control
IN REVIEWSOURCES DISAGREE ON DATE OR LOSS · 3 SOURCES
Lost
$88M
sources: $2M to $90M
Returned
none listed
as the sources state it
Rank
#70
among thefts by dollars lost
What happened
Mirror Protocol was exploited starting October 8, 2021, via inadequate access control on collateral unlock functions, allowing attackers to withdraw ~$90M over 7 months before discovery in May 2022. A follow-up $2M exploit in May 2022 exploited oracle misalignment during the LUNC-LUNA2 transition.
In review: possible duplicate within one source; sources disagree on the loss.
Details
- Date
- May 26, 2022
- Kind
- Hack or exploit
- Method
- Improper Access Control
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Terra
After the theft
- Recovered or seized
- $10K
“Since October 2021, attackers have exploited this vulnerability for multiple attacks within a period of 7 months, and the highest single profit exceeded $4 million ($4.3 million using $10,000), none of which was recovered by Terraform Labs Or the Mirror team found out.” (SlowMist Hacked)
Related incidents
Mirror 2023 · Hack or exploit · undisclosed
Mirror Protocol 2022 · Hack or exploit · $2M
Mirror 2021 · Hack or exploit · $90M
Wintermute 2022 · Hack or exploit · $17.6M
Crema Finance 2022 · Hack or exploit · $8.8M
Mirror Protocol 2022 · Hack or exploit · $2M
Mirror 2021 · Hack or exploit · $90M
Wintermute 2022 · Hack or exploit · $17.6M
Crema Finance 2022 · Hack or exploit · $8.8M
Cite this page
SwanBluechip, "Mirror hack, May 26, 2022: $88M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/hta38abab446/ (data as of 2026-10-31).