Hack history / 2022 / Hack or exploit
Rigoblock
Hack or exploit on Feb 18, 2022 · Improper Access Control
SOURCES AGREE ON DATE AND LOSS · 2 SOURCES
Lost
$464K
dollars at the time
Returned
none listed
as the sources state it
Rank
#1,179
among thefts by dollars lost
What happened
RigoBlock's Dragos contracts lacked the onlyOwner modifier on the setMultipleAllowances function, allowing attackers to modify token allowances without authorization. An attacker exploited this to drain 160.86 ETH from the protocol's liquidity pools. The attacker later returned 90% of funds, retaining 10% as a bounty.
Details
- Date
- Feb 18, 2022
- Kind
- Hack or exploit
- Method
- Improper Access Control
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
After the theft
- Returned by the attacker
- yes, amount not stated
“The attacker later returned 90% of funds, retaining 10% as a bounty.” (DefiLlama) - Bounty paid
- yes, amount not stated
“The attacker later returned 90% of funds, retaining 10% as a bounty.” (DefiLlama)
Reported by
Related incidents
Mirror 2022 · Hack or exploit · $88M
Wintermute 2022 · Hack or exploit · $17.6M
Crema Finance 2022 · Hack or exploit · $8.8M
Ankr 2022 · Hack or exploit · $5M
TempleDAO 2022 · Hack or exploit · $2.3M
Wintermute 2022 · Hack or exploit · $17.6M
Crema Finance 2022 · Hack or exploit · $8.8M
Ankr 2022 · Hack or exploit · $5M
TempleDAO 2022 · Hack or exploit · $2.3M
Cite this page
SwanBluechip, "Rigoblock hack, Feb 18, 2022: $464K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htb9bf771c95/ (data as of 2026-10-31).