Hack history / 2021 / Hack or exploit
88mph
Hack or exploit on Jun 7, 2021 · Missing Input Validation
ONE SOURCE · 1 SOURCE
Lost
undisclosed
dollars at the time
Returned
none listed
as the sources state it
Rank
not ranked
collapses, frauds and later news are not ranked
What happened
A critical initialization bug in the 88mph NFT contract allowed anyone to call initialize() multiple times, enabling arbitrary contract owner takeover and unrestricted NFT minting. An attacker could have stolen all underlying assets by minting/burning user NFTs. Reported via Immunefi with $42,069 bounty; 88mph patched within 2 hours.
Details
- Date
- Jun 7, 2021
- Kind
- Hack or exploit
- Method
- Missing Input Validation
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
Reported by
Related incidents
88mph NFT 2021 · Hack or exploit · undisclosed
88mph 2020 · Hack or exploit · undisclosed
Ref Finance 2021 · Hack or exploit · $3.2M
Growth DeFi 2021 · Hack or exploit · $1.4M
Glide Finance 2021 · Hack or exploit · $300K
88mph 2020 · Hack or exploit · undisclosed
Ref Finance 2021 · Hack or exploit · $3.2M
Growth DeFi 2021 · Hack or exploit · $1.4M
Glide Finance 2021 · Hack or exploit · $300K
Cite this page
SwanBluechip, "88mph hack, Jun 7, 2021: undisclosed lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/hte557a2323d/ (data as of 2026-10-31).