Hack history / 2022 / Hack or exploit
Team Finance
Hack or exploit on Oct 27, 2022 · Missing Input Validation
ATTACK TX CONFIRMED ON CHAINSOURCES AGREE ON DATE AND LOSS · 5 SOURCES
Lost
$15.2M
sources: $14.5M to $15.8M
Returned
$13.1M
86% of the loss, as a source states it
Rank
#235
among thefts by dollars lost
What happened
Team Finance's migrate function, which moves locked LP positions from Uniswap v2 to v3, never validated that token and pair parameters matched the caller's lock. On 27 October 2022, an attacker locked a worthless token, then used another user's lock parameters to move that liquidity into an attacker-controlled v3 pair at a skewed price. Four locked projects lost ~$15.8M for $2,700 of attacker capital.
Details
- Date
- Oct 27, 2022
- Kind
- Hack or exploit
- Method
- Missing Input Validation
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
- Audit (rekt.news)
- Zokyo Security
After the theft
- Returned by the attacker
- $13.4M
“On October 31, the Team Finance white hat hacker address has returned $13.4 million in digital assets, including 548.7 ETH ($860,000) to FEG, 765,000 DAI and 11.8 million TSUKA ($626,000) to Tsuka, about 5 million DAI and 74.6 trillion CAW (~$5.5 million) to CAW, 209 ETH ($328,000) to KNDX, smithbot.eth has returned 263 billion KNDX ($292,000) to KNDX.” (SlowMist Hacked) - Recovered or frozen
- $13.1M
“$14.5M taken, $1.4M after recovery or freezing” (Web3 Is Going Great)
Related incidents
Memecoin team accused of hacking influencer Twitter account to manipulate markets 2024 · Costly mistake or other · $30K
Superlative Apes team does a "slow rug pull" after drawing in $2.9 million 2022 · Rug pull · $2.9M
Rogue Society team resurfaces after being called out for rug pulling $5.5 million 2022 · Later news (arrest, ruling) · $5.5M
Rich Bulls Club team resurfaces after being called out for rug pulling $3.7 million 2022 · Later news (arrest, ruling) · $3.7M
Team behind the NeoNexus NFT project raises several million dollars, then abandons it 2022 · Rug pull · $2.2M
Superlative Apes team does a "slow rug pull" after drawing in $2.9 million 2022 · Rug pull · $2.9M
Rogue Society team resurfaces after being called out for rug pulling $5.5 million 2022 · Later news (arrest, ruling) · $5.5M
Rich Bulls Club team resurfaces after being called out for rug pulling $3.7 million 2022 · Later news (arrest, ruling) · $3.7M
Team behind the NeoNexus NFT project raises several million dollars, then abandons it 2022 · Rug pull · $2.2M
Cite this page
SwanBluechip, "Team Finance hack, Oct 27, 2022: $15.2M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/hte69303f67d/ (data as of 2026-10-31).