Hack history / 2026 / Hack or exploit
Chainflip AMM
Hack or exploit on Sep 12, 2026 · Bridge Logic Flaw
SOURCES AGREE ON DATE AND LOSS · 2 SOURCES
Lost
$736K
dollars at the time
Returned
none listed
as the sources state it
Rank
#1,026
among thefts by dollars lost
What happened
An attacker exploited Chainflip’s TRON-specific swap instruction and refund handling. Unlike Chainflip’s other integrations, TRON swap instructions were derived from transaction memos. The attacker could attach a different memo to a transaction already signed by Chainflip validators, causing Chainflip to interpret the transaction as another swap. When that duplicate instruction failed, the protocol refunded it even though the underlying deposit had already produced a payout, effectively allowing the same deposit to be paid twice. The attacker attempted the sequence eight times over approximately 90 minutes, with six unauthorized payouts succeeding
Details
- Date
- Sep 12, 2026
- Kind
- Hack or exploit
- Method
- Bridge Logic Flaw
- How in
- Bridge and cross-chain
- Target
- DeFi protocol
- Chains
- Tron
After the theft
- Victims reimbursed
- yes, amount not stated
“The network is paused, a fix is ready, restart is expected as early as Monday, and affected users will be made whole.” (SlowMist Hacked)
Reported by
Related incidents
THORChain DEX 2026 · Hack or exploit · $10.7M
NEAR Intents 2026 · Hack or exploit · $3.8M
Harmony Bridge 2026 · Hack or exploit · $3.2M
Aztec Bridge 2026 · Hack or exploit · $2.1M
Payy Network 2026 · Hack or exploit · $1.8M
NEAR Intents 2026 · Hack or exploit · $3.8M
Harmony Bridge 2026 · Hack or exploit · $3.2M
Aztec Bridge 2026 · Hack or exploit · $2.1M
Payy Network 2026 · Hack or exploit · $1.8M
Cite this page
SwanBluechip, "Chainflip AMM hack, Sep 12, 2026: $736K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htff352a299d/ (data as of 2026-10-31).