Hack history / 2022 / Hack or exploit
BasketDAO
Hack or exploit on Mar 30, 2022 · Arbitrary External Call
SOURCES AGREE ON DATE AND LOSS · 2 SOURCES
Lost
$1.2M
dollars at the time
Returned
none listed
as the sources state it
Rank
#875
among thefts by dollars lost
What happened
BasketDAO's BMIZapper contract lacked input validation in the _primitiveToBMI function, allowing arbitrary external calls. The attacker passed a malicious address to drain all approved crypto assets held by the contract.
Details
- Date
- Mar 30, 2022
- Kind
- Hack or exploit
- Method
- Arbitrary External Call
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
Reported by
Related incidents
BasketDAO 2024 · Hack or exploit · $1.2M
Rubic 2022 · Hack or exploit · $1.4M
Auctus 2022 · Hack or exploit · $726K
Brahma Finance 2022 · Hack or exploit · $89K
Rubic 2022 · Hack or exploit · $1.4M
Auctus 2022 · Hack or exploit · $726K
Brahma Finance 2022 · Hack or exploit · $89K
Cite this page
SwanBluechip, "BasketDAO hack, Mar 30, 2022: $1.2M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htb096474bde/ (data as of 2026-10-31).