Hack history / 2024 / Hack or exploit
Penpie
Hack or exploit on Sep 3, 2024 · Reentrancy
IN REVIEWSOURCES AGREE ON DATE AND LOSS · 5 SOURCES
Lost
$27.3M
dollars at the time
Returned
none listed
as the sources state it
Rank
#167
among thefts by dollars lost
What happened
Penpie was drained of ~$27M via a reentrancy attack. The attacker created malicious SY tokens mimicking Pendle yield tokens and exploited missing reentrancy protection in _harvestBatchMarketRewards() to claim real rewards using fake token tickets.
In review: possible duplicate within one source.
Details
- Date
- Sep 3, 2024
- Kind
- Hack or exploit
- Method
- Reentrancy
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
- Audit (rekt.news)
- Watch Pug, Zokyo
Related incidents
Terra 2.0 2024 · Hack or exploit · $6.4M
Gempad 2024 · Hack or exploit · $1.9M
Minterest 2024 · Hack or exploit · $1.4M
Clober Liquidity Vault 2024 · Hack or exploit · $501K
Sumer.money 2024 · Hack or exploit · $350K
Gempad 2024 · Hack or exploit · $1.9M
Minterest 2024 · Hack or exploit · $1.4M
Clober Liquidity Vault 2024 · Hack or exploit · $501K
Sumer.money 2024 · Hack or exploit · $350K
Cite this page
SwanBluechip, "Penpie hack, Sep 3, 2024: $27.3M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htc306d64cbb/ (data as of 2026-10-31).