Hack history / 2024 / Hack or exploit
Bungee
Hack or exploit on Jan 16, 2024 · Missing Input Validation
ATTACK TX CONFIRMED ON CHAINSOURCES AGREE ON DATE AND LOSS · 5 SOURCES
Lost
$3.3M
dollars at the time
Returned
none listed
as the sources state it
Rank
#559
among thefts by dollars lost
What happened
Socket's Bungee bridge aggregator was exploited on January 16, 2024 when missing validation of the swapExtraData parameter allowed over 700 users to lose $3.3M via injected unauthorized transferFrom calls.
Details
- Date
- Jan 16, 2024
- Kind
- Hack or exploit
- Method
- Missing Input Validation
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
- Audit (rekt.news)
- out of scope
Related incidents
Hedgey 2024 · Hack or exploit · $44.7M
ThalaSwap 2024 · Hack or exploit · $25.5M
PrismaLST 2024 · Hack or exploit · $11.6M
DeltaPrime 2024 · Hack or exploit · $4.8M
Miner 2024 · Hack or exploit · $466K
ThalaSwap 2024 · Hack or exploit · $25.5M
PrismaLST 2024 · Hack or exploit · $11.6M
DeltaPrime 2024 · Hack or exploit · $4.8M
Miner 2024 · Hack or exploit · $466K
Cite this page
SwanBluechip, "Bungee hack, Jan 16, 2024: $3.3M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htbf22e8e8fc/ (data as of 2026-11-01).