Incident All ledgers
Cashio: $52.8m
Cashio lost $52.8m on 23 March 2022. Ranked 70th of 1,272 crypto failures, with method, returned funds and comparable incidents.
- Date
- 23 March 2022
- Lost
- $52.8m
- Returned or repaid
- None recorded
- Target
- DeFi Protocol
- Category
- Input Validation
- Method
- Missing Input Validation
- Chains
- Solana
Cashio lost about $52.8M when an attacker exploited missing account-validation checks in its collateral deposit path, using fake tokens as Saber LP collateral to mint roughly 2 billion CASH and swap them for stablecoins, crashing CASH's price.
Against the ledger
- It ranks 70th of the 1,272 incidents with a known loss, and 13th in 2022.
- It accounts for 7.4% of the $710.6m in known losses in March 2022.
- 66 incidents in the ledger are classified as Input Validation, for $755.5m in total. This one is 7.0% of that.
- The ledger records no returned funds.
Closest in size by the same method
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 31 Dec 2023 | Orbit Bridge | $81.7m | DeFi Protocol | Signature Verification Flaw | — |
| 28 Jan 2022 | Qubit | $80.0m | DeFi Protocol | Missing Input Validation | — |
| 19 Apr 2024 | Hedgey | $44.7m | DeFi Protocol | Missing Input Validation | — |
| 02 Oct 2022 | Transit Swap | $28.9m | DeFi Protocol | Missing Input Validation | — |
| 15 Nov 2024 | ThalaSwap | $25.5m | DeFi Protocol | Missing Input Validation | — |
All failures in 2022 · The failures ledger
Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.
Cite this Bitminer.io, “Cashio, failures ledger”, data to 2 November 2026, https://bitminer.io/ledger/incident/cashio-2022-03-23/. How this is built