Incident All ledgers
Munchables: $62.5m
Munchables lost $62.5m on 26 March 2024. Ranked 59th of 1,272 crypto failures, with method, returned funds and comparable incidents.
- Date
- 26 March 2024
- Lost
- $62.5m
- Returned or repaid
- None recorded
- Target
- Gaming
- Category
- Access Control
- Method
- Proxy Upgrade Hijack
- Chains
- Blast
On March 26, 2024, Munchables, a gaming NFT project on the Blast layer-2, lost $62.5 million after a rogue developer hired to write its smart contracts planted vulnerabilities. The developer then used control of the upgradeable proxy to credit themselves 1 million ETH and drain the protocol.
Against the ledger
- It ranks 59th of the 1,272 incidents with a known loss, and 4th in 2024.
- It accounts for 49.2% of the $127.1m in known losses in March 2024.
- 225 incidents in the ledger are classified as Access Control, for $1.96bn in total. This one is 3.2% of that.
- The ledger records no returned funds.
Closest in size by the same method
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 08 Oct 2021 | Mirror | $90.0m | DeFi Protocol | Improper Access Control | — |
| 01 Apr 2025 | UPCX | $70.0m | DeFi Protocol | Proxy Upgrade Hijack | — |
| 25 Mar 2019 | Coinbene | $40.0m | CEX | Improper Access Control | — |
| 10 Jun 2018 | Coinrail | $37.2m | CEX | Improper Access Control | — |
| 01 Jul 2017 | Parity | $30.0m | Wallet | Uninitialized Proxy | — |
All failures in 2024 · The failures ledger
Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.
Cite this Bitminer.io, “Munchables, failures ledger”, data to 2 November 2026, https://bitminer.io/ledger/incident/munchables-2024-03-26/. How this is built