Hack history / 2026 / Hack or exploit
Aurellion
Hack or exploit on May 12, 2026 · Uninitialized Proxy
SOURCES AGREE ON DATE AND LOSS · 2 SOURCES
Lost
$456K
dollars at the time
Returned
none listed
as the sources state it
Rank
#1,186
among thefts by dollars lost
What happened
Aurellion Labs on Arbitrum was drained of $456,442.53 USDC on May 12, 2026 after incomplete Diamond Proxy initialization left the SafeOwnable facet's _initialized slot at zero. The attacker called initialize() to seize ownership and inject a draining facet.
Details
- Date
- May 12, 2026
- Kind
- Hack or exploit
- Method
- Uninitialized Proxy
- How in
- Smart contract bug
- Target
- RWA
- Chains
- Arbitrum
After the theft
- Victims reimbursed
- yes, amount not stated
“The project paused operations, committed to reimbursing users, and advised revoking old approvals.” (SlowMist Hacked)
Reported by
Related incidents
Cite this page
SwanBluechip, "Aurellion hack, May 12, 2026: $456K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htc88a8b49b9/ (data as of 2026-10-31).