BTC—ETH—

Incident All ledgers

dForce Lending: $25.0m

dForce Lending lost $25.0m on 19 April 2020. Ranked 116th of 1,272 crypto failures, with method, returned funds and comparable incidents.

Date
19 April 2020
Lost
$25.0m
Returned or repaid
None recorded
Target
DeFi Protocol
Category
Reentrancy
Method
Reentrancy
Chains
Ethereum

On April 19, 2020, an attacker exploited an ERC777 reentrancy flaw in dForce's Lendf.Me, repeatedly supplying and withdrawing tokens before balances updated to take about $25M. Law enforcement and exchanges recovered the funds within days.

Against the ledger

Other incidents named dForce

DateTargetLostTypeMethodReturned
10 Feb 2023dForce Lending$3.6mDeFi ProtocolRead-Only Reentrancy—

Closest in size by the same method

DateTargetLostTypeMethodReturned
09 Jul 2025GMX V1 EVM$42.0mDeFi ProtocolReentrancy$40.0m
18 Dec 2021Grim Finance$30.0mDeFi ProtocolReentrancy—
03 Sept 2024Penpie$27.0mDeFi ProtocolReentrancy—
30 Aug 2021CREAM Lending$18.8mDeFi ProtocolReentrancy—
14 May 2021flash.sx / vaults.sx$13.0mDeFi ProtocolReentrancy—

All failures in 2020 · The failures ledger

Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.

Cite this Bitminer.io, “dForce Lending, failures ledger”, data to 2 November 2026, https://bitminer.io/ledger/incident/dforce-lending-2020-04-19/. How this is built