Incident All ledgers
flash.sx / vaults.sx: $13.0m
flash.sx / vaults.sx lost $13.0m on 14 May 2021. Ranked 171st of 1,272 crypto failures, with method, returned funds and comparable incidents.
- Date
- 14 May 2021
- Lost
- $13.0m
- Returned or repaid
- None recorded
- Target
- DeFi Protocol
- Category
- Reentrancy
- Method
- Reentrancy
- Chains
- EOS
An attacker exploited a reentrancy flaw in the vaults.sx flashloan contract, taking about $13M in EOS and USDT and spreading it over 246 accounts. EOS block producers froze the accounts by supermajority, and all users were made whole.
Against the ledger
- It ranks 171st of the 1,272 incidents with a known loss, and 35th in 2021.
- It accounts for 4.5% of the $287.1m in known losses in May 2021.
- 61 incidents in the ledger are classified as Reentrancy, for $458.1m in total. This one is 2.8% of that.
- The ledger records no returned funds.
Closest in size by the same method
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 19 Apr 2020 | dForce Lending | $25.0m | DeFi Protocol | Reentrancy | — |
| 30 Aug 2021 | CREAM Lending | $18.8m | DeFi Protocol | Reentrancy | — |
| 21 Dec 2021 | Gamma | $8.2m | DeFi Protocol | Reentrancy | — |
| 17 Nov 2020 | Origin Protocol | $7.7m | DeFi Protocol | Reentrancy | — |
| 28 May 2021 | BurgerSwap | $7.2m | DeFi Protocol | Reentrancy | — |
All failures in 2021 · The failures ledger
Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.
Cite this Bitminer.io, “flash.sx / vaults.sx, failures ledger”, data to 2 November 2026, https://bitminer.io/ledger/incident/flash-sx-vaults-sx-2021-05-14/. How this is built