Hack history / 2021 / Hack or exploit
Growth DeFi
Hack or exploit on Feb 9, 2021 · Missing Input Validation
SOURCES AGREE ON DATE AND LOSS · 2 SOURCES
Lost
$1.4M
dollars at the time
Returned
none listed
as the sources state it
Rank
#827
among thefts by dollars lost
What happened
On 8 February 2021 an attacker created a worthless rAXZZ token and a GRO/rAXZZ Uniswap pool, then used the single-asset deposit feature of Growth DeFi's stkGRO/rAAVE farming contract which failed to validate LP token identity, accepting the GRO/rAXZZ LP shares as legitimate GRO/rAAVE LP shares, allowing the attacker to mint 14,513 stkGRO/rAAVE shares and drain the pool.
Details
- Date
- Feb 9, 2021
- Kind
- Hack or exploit
- Method
- Missing Input Validation
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
- Audit (rekt.news)
- Consensys Dilligence
Reported by
Related incidents
Carson DeFi 2023 · Hack or exploit · $150K
Over $35 million lost as contagion from Euler hack spreads throughout defi 2023 · Hack or exploit · $37.6M
CoinGecko&Etherscan&DeFi Pulse 2022 · Phishing · undisclosed
Hacker pulls $1 million from defi project, then destroys contract without withdrawing the funds 2022 · Hack or exploit · $1M
2omb and Redemption defi projects endure repeated flash loan attacks 2022 · Hack or exploit · $190K
Over $35 million lost as contagion from Euler hack spreads throughout defi 2023 · Hack or exploit · $37.6M
CoinGecko&Etherscan&DeFi Pulse 2022 · Phishing · undisclosed
Hacker pulls $1 million from defi project, then destroys contract without withdrawing the funds 2022 · Hack or exploit · $1M
2omb and Redemption defi projects endure repeated flash loan attacks 2022 · Hack or exploit · $190K
Cite this page
SwanBluechip, "Growth DeFi hack, Feb 9, 2021: $1.4M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htac186b377d/ (data as of 2026-10-31).