Hack history / 2024 / Hack or exploit
Dough Finance
Hack or exploit on Jul 12, 2024 · Arbitrary External Call
IN REVIEWSOURCES AGREE ON DATE AND LOSS · 4 SOURCES
Lost
$1.9M
sources: $1.8M to $2.1M
Returned
none listed
as the sources state it
Rank
#727
among thefts by dollars lost
What happened
On July 12, 2024 Dough Finance on Ethereum was exploited for approximately $1.96 million via unvalidated call data in the ConnectorDeleverageParaswap contract, where attackers combined a flashloan with the arbitrary external call vulnerability to manipulate data and transfer WETH. Stolen funds were swapped to ETH and 600 ETH (~$1.8M) was later deposited into Tornado Cash; a white-hat recovered 69.12 ETH.
In review: possible duplicate within one source.
Details
- Date
- Jul 12, 2024
- Kind
- Hack or exploit
- Method
- Arbitrary External Call
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
After the theft
- Recovered or seized
- yes, amount not stated
“a white-hat recovered 69.12 ETH.” (DefiLlama) - Returned by the attacker
- yes, amount not stated
“Around 76 ETH (approximately $260,000) has been returned by white hat hackers.” (SlowMist Hacked)
Related incidents
Unizen 2024 · Hack or exploit · $2.1M
BasketDAO 2024 · Hack or exploit · $1.2M
Chainge Finance 2024 · Hack or exploit · $716K
Spectra Finance 2024 · Hack or exploit · $73K
Aave 2024 · Hack or exploit · $56K
BasketDAO 2024 · Hack or exploit · $1.2M
Chainge Finance 2024 · Hack or exploit · $716K
Spectra Finance 2024 · Hack or exploit · $73K
Aave 2024 · Hack or exploit · $56K
Cite this page
SwanBluechip, "Dough Finance hack, Jul 12, 2024: $1.9M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htac5cd333ee/ (data as of 2026-10-31).