Hack history / 2026 / Hack or exploit
HermesVault
Hack or exploit on May 19, 2026 · Withdrawal Logic Flaw
SOURCES AGREE ON DATE AND LOSS · 2 SOURCES
Lost
$30K
dollars at the time
Returned
$26K
87% of the loss, as a source states it
Rank
#2,042
among thefts by dollars lost
What happened
On May 19, 2026, HermesVault, an Algorand privacy protocol, was exploited when an attacker bypassed ZK proof verification via a flaw in the withdrawal verification script's key reset defense logic, stealing 261,000 ALGO (~$29.5K).
Details
- Date
- May 19, 2026
- Kind
- Hack or exploit
- Method
- Withdrawal Logic Flaw
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Algorand
Reported by
Related incidents
TAC 2026 · Hack or exploit · $7.5M
Sweat Foundation 2026 · Hack or exploit · $3.5M
Maya Protocol 2026 · Hack or exploit · $1.7M
Allbridge Core 2026 · Hack or exploit · $1.6M
Aftermath Perps 2026 · Hack or exploit · $1.1M
Sweat Foundation 2026 · Hack or exploit · $3.5M
Maya Protocol 2026 · Hack or exploit · $1.7M
Allbridge Core 2026 · Hack or exploit · $1.6M
Aftermath Perps 2026 · Hack or exploit · $1.1M
Cite this page
SwanBluechip, "HermesVault hack, May 19, 2026: $30K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/hte24570b7ef/ (data as of 2026-10-31).