Hack history / 2025 / Hack or exploit
Goldfinch
Hack or exploit on Dec 2, 2025 · Token Approval Abuse
SOURCES AGREE ON DATE AND LOSS · 2 SOURCES
Lost
$330K
dollars at the time
Returned
none listed
as the sources state it
Rank
#1,282
among thefts by dollars lost
What happened
A flaw in Goldfinch's legacy collectInterestRepayment() function permitted transfers from any approved address without proper safeguards. An attacker deposited USDC to manipulate share price, then repeatedly withdrew inflated amounts, draining the victim's holdings through the contract's misconfigured approval logic.
Details
- Date
- Dec 2, 2025
- Kind
- Hack or exploit
- Method
- Token Approval Abuse
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
Reported by
Related incidents
Coinbase 2025 · Hack or exploit · $300K
MoonHacker 2025 · Hack or exploit · $300K
ZEROBASE 2025 · Hack or exploit · $250K
Dexmax AI 2025 · Hack or exploit · $130K
MoonHacker 2025 · Hack or exploit · $300K
ZEROBASE 2025 · Hack or exploit · $250K
Dexmax AI 2025 · Hack or exploit · $130K
Cite this page
SwanBluechip, "Goldfinch hack, Dec 2, 2025: $330K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/hte7d9d0b0cb/ (data as of 2026-10-31).