Incident All ledgers
Hedgey: $44.7m
Hedgey lost $44.7m on 19 April 2024. Ranked 78th of 1,272 crypto failures, with method, returned funds and comparable incidents.
- Date
- 19 April 2024
- Lost
- $44.7m
- Returned or repaid
- None recorded
- Target
- DeFi Protocol
- Category
- Input Validation
- Method
- Missing Input Validation
- Chains
- Arbitrum, Ethereum
Hedgey Finance lost about $44.7M in USDC, NOBL, MASA and BONUS from its Arbitrum and Ethereum vaults. An attacker used flashloans and missing validation in createLockedCampaign to get around access controls and set up fraudulent approvals.
Against the ledger
- It ranks 78th of the 1,272 incidents with a known loss, and 7th in 2024.
- It accounts for 66.2% of the $67.5m in known losses in April 2024.
- 66 incidents in the ledger are classified as Input Validation, for $755.5m in total. This one is 5.9% of that.
- The ledger records no returned funds.
Closest in size by the same method
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 31 Dec 2023 | Orbit Bridge | $81.7m | DeFi Protocol | Signature Verification Flaw | — |
| 28 Jan 2022 | Qubit | $80.0m | DeFi Protocol | Missing Input Validation | — |
| 23 Mar 2022 | Cashio | $52.8m | DeFi Protocol | Missing Input Validation | — |
| 02 Oct 2022 | Transit Swap | $28.9m | DeFi Protocol | Missing Input Validation | — |
| 15 Nov 2024 | ThalaSwap | $25.5m | DeFi Protocol | Missing Input Validation | — |
All failures in 2024 · The failures ledger
Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.
Cite this Bitminer.io, “Hedgey, failures ledger”, data to 2 November 2026, https://bitminer.io/ledger/incident/hedgey-2024-04-19/. How this is built