Hack history / 2024 / Hack or exploit
LiFi Finance
Hack or exploit on Jul 16, 2024 · Token Approval Abuse
SOURCES AGREE ON DATE AND LOSS · 4 SOURCES
Lost
$10M
sources: $9.7M to $11.6M
Returned
none listed
as the sources state it
Rank
#298
among thefts by dollars lost
What happened
On July 16, 2024 LI.FI protocol was exploited via insufficient input validation in GasZipFacet.sol, where the depositToGasZipERC20 function allowed user-controlled _swapData parameters to reach low-level calls with malicious transferFrom() calldata, draining $8-11M from 153 wallets with infinite approvals across Ethereum and Arbitrum.
Details
- Date
- Jul 16, 2024
- Kind
- Hack or exploit
- Method
- Token Approval Abuse
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- zkSync Era, Linea, Metis, Ethereum, Solana
Related incidents
Seneca 2024 · Hack or exploit · $6.4M
Spectral Labs 2024 · Hack or exploit · $250K
MainnetSettler 2024 · Hack or exploit · $66K
Spectral Labs 2024 · Hack or exploit · $250K
MainnetSettler 2024 · Hack or exploit · $66K
Cite this page
SwanBluechip, "LiFi Finance hack, Jul 16, 2024: $10M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htfae9aa0aa4/ (data as of 2026-10-31).