Incident All ledgers
Mirror: $90.0m
Mirror lost $90.0m on 8 October 2021. Ranked 47th of 1,272 crypto failures, with method, returned funds and comparable incidents.
- Date
- 8 October 2021
- Lost
- $90.0m
- Returned or repaid
- None recorded
- Target
- DeFi Protocol
- Category
- Access Control
- Method
- Improper Access Control
- Chains
- Terra
Mirror Protocol was exploited over roughly seven months, from October 2021 until discovery in May 2022, through a duplicate ID flaw in its collateral unlock logic. Attackers drained about $89.7M before limited Terra monitoring caught it.
Against the ledger
- It ranks 47th of the 1,272 incidents with a known loss, and 10th in 2021.
- It accounts for 20.0% of the $449.0m in known losses in October 2021.
- 225 incidents in the ledger are classified as Access Control, for $1.96bn in total. This one is 4.6% of that.
- The ledger records no returned funds.
Other incidents named Mirror
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 30 May 2022 | Mirror | $2.0m | DeFi Protocol | Improper Access Control | — |
Closest in size by the same method
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 12 Feb 2018 | BitGrail | $170.0m | CEX | Improper Access Control | — |
| 09 Nov 2017 | Parity Multisig | $150.0m | DeFi Protocol | Uninitialized Proxy | — |
| 01 Apr 2025 | UPCX | $70.0m | DeFi Protocol | Proxy Upgrade Hijack | — |
| 26 Mar 2024 | Munchables | $62.5m | Gaming | Proxy Upgrade Hijack | — |
| 25 Mar 2019 | Coinbene | $40.0m | CEX | Improper Access Control | — |
All failures in 2021 · The failures ledger
Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.
Cite this Bitminer.io, “Mirror, failures ledger”, data to 2 November 2026, https://bitminer.io/ledger/incident/mirror-2021-10-08/. How this is built