Incident All ledgers

Harvest Finance: $24.0m

Harvest Finance lost $24.0m on 26 October 2020. Ranked 120th of 1,272 crypto failures, with method, returned funds and comparable incidents.

Date: 26 October 2020
Lost: $24.0m
Returned or repaid: None recorded
Target: DeFi Protocol
Category: Oracle Manipulation
Method: Spot Price Manipulation
Chains: Ethereum

Harvest Finance was exploited on October 26, 2020 for an estimated $24-34M. An attacker used a $50M flashloan to distort Curve y-pool USDT/USDC balances, repeatedly minting fTokens cheaply and redeeming them at normal value.

Against the ledger

It ranks 120th of the 1,272 incidents with a known loss, and 4th in 2020.
It accounts for 90.4% of the $26.5m in known losses in October 2020.
159 incidents in the ledger are classified as Oracle Manipulation, for $894.1m in total. This one is 2.7% of that.
The ledger records no returned funds.

Other incidents named Harvest

Date	Target	Lost	Type	Method	Returned
19 Mar 2023	Harvest Keeper	$933,000	DeFi Protocol	Admin Drain	—

Closest in size by the same method

Date	Target	Lost	Type	Method	Returned
12 May 2021	xToken	$24.0m	DeFi Protocol	Spot Price Manipulation	—
12 Apr 2022	Elephant Money	$22.2m	DeFi Protocol	Spot Price Manipulation	—
06 Nov 2022	Pando Rings	$22.0m	DeFi Protocol	Spot Price Manipulation	—
10 Jun 2024	UwU Lend	$20.0m	DeFi Protocol	Spot Price Manipulation	—
16 Apr 2026	Rhea Lend	$18.4m	DeFi Protocol	Spot Price Manipulation	—

On Bitminer.io

Harvest Keeper Turns Out to Be Phishers

All failures in 2020 · The failures ledger

Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.

Cite this Bitminer.io, “Harvest Finance, failures ledger”, data to 2 November 2026, https://bitminer.io/ledger/incident/harvest-finance-2020-10-26/. How this is built