Hack history / 2023 / Hack or exploit
Pawnfi
Hack or exploit on Jun 17, 2023 · Incorrect Share Accounting
ATTACK TX CONFIRMED ON CHAINSOURCES AGREE ON DATE AND LOSS · 2 SOURCES
Lost
$820K
dollars at the time
Returned
none listed
as the sources state it
Rank
#994
among thefts by dollars lost
What happened
Pawnfi's ApeStaking contract allowed attackers to use the same NFT as collateral multiple times for borrowing APE tokens. The vulnerability stemmed from missing NFT transfer verification in the depositAndBorrowApeAndStake() function, enabling an attacker to borrow without securing proper collateral by leveraging an already-staked NFT.
Details
- Date
- Jun 17, 2023
- Kind
- Hack or exploit
- Method
- Incorrect Share Accounting
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
Reported by
Related incidents
LendHub 2023 · Hack or exploit · $6M
Palmswap 2023 · Hack or exploit · $900K
Zircon Gamma 2023 · Hack or exploit · $350K
BRA 2023 · Hack or exploit · $225K
BEVO 2023 · Hack or exploit · $45K
Palmswap 2023 · Hack or exploit · $900K
Zircon Gamma 2023 · Hack or exploit · $350K
BRA 2023 · Hack or exploit · $225K
BEVO 2023 · Hack or exploit · $45K
Cite this page
SwanBluechip, "Pawnfi hack, Jun 17, 2023: $820K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htc5af1f266b/ (data as of 2026-10-31).