Hack history / 2026 / Hack or exploit
USDGambit and TLP
Hack or exploit on Jan 5, 2026 · Deployer Key Compromised
SOURCES AGREE ON DATE AND LOSS · 2 SOURCES
Lost
$1.5M
dollars at the time
Returned
none listed
as the sources state it
Rank
#790
among thefts by dollars lost
What happened
Attackers compromised a shared deployer account that managed both USDGambit and TLP contracts, likely through key theft or credential compromise. This allowed them to deploy a new ProxyAdmin contract with full control over both protocols, draining $1.5M before moving funds to Ethereum and depositing into Tornado Cash.
Details
- Date
- Jan 5, 2026
- Kind
- Hack or exploit
- Method
- Deployer Key Compromised
- How in
- Keys, accounts and infrastructure
- Target
- DeFi protocol
- Chains
- Arbitrum
Reported by
Related incidents
Cite this page
SwanBluechip, "USDGambit and TLP hack, Jan 5, 2026: $1.5M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/hte044a8b781/ (data as of 2026-10-31).