Incident All ledgers
Parity Multisig: $150.0m
Parity Multisig lost $150.0m on 9 November 2017. Ranked 28th of 1,272 crypto failures, with method, returned funds and comparable incidents.
- Date
- 9 November 2017
- Lost
- $150.0m
- Returned or repaid
- None recorded
- Target
- DeFi Protocol
- Category
- Access Control
- Method
- Uninitialized Proxy
- Chains
- Ethereum
On November 8, 2017, a user accidentally exploited a flaw in Parity's multi-sig wallet library, which lacked protection against reinitialization and destruction by non-owners. This permanently disabled over 500 wallets holding about 500,000 ETH, valued at $150 million.
Against the ledger
- It ranks 28th of the 1,272 incidents with a known loss, and 1st in 2017.
- It accounts for 82.9% of the $181.0m in known losses in November 2017.
- 225 incidents in the ledger are classified as Access Control, for $1.96bn in total. This one is 7.6% of that.
- The ledger records no returned funds.
Other incidents named Parity
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 01 Jul 2017 | Parity | $30.0m | Wallet | Uninitialized Proxy | — |
Closest in size by the same method
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 01 Apr 2026 | Drift Trade | $295.0m | DeFi Protocol | Proxy Upgrade Hijack | — |
| 12 Feb 2018 | BitGrail | $170.0m | CEX | Improper Access Control | — |
| 08 Oct 2021 | Mirror | $90.0m | DeFi Protocol | Improper Access Control | — |
| 01 Apr 2025 | UPCX | $70.0m | DeFi Protocol | Proxy Upgrade Hijack | — |
| 26 Mar 2024 | Munchables | $62.5m | Gaming | Proxy Upgrade Hijack | — |
All failures in those years · The failures ledger
Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.
Cite this Bitminer.io, “Parity Multisig, failures ledger”, data to 2 November 2026, https://bitminer.io/ledger/incident/parity-multisig-2017-11-09/. How this is built