Incident All ledgers
Penpie: $27.0m
Penpie lost $27.0m on 3 September 2024. Ranked 107th of 1,272 crypto failures, with method, returned funds and comparable incidents.
- Date
- 3 September 2024
- Lost
- $27.0m
- Returned or repaid
- None recorded
- Target
- DeFi Protocol
- Category
- Reentrancy
- Method
- Reentrancy
- Chains
- Ethereum
Penpie lost about $27M when an attacker used fake SY tokens posing as Pendle yield tokens and a reentrancy flaw in its reward-harvesting function to claim real rewards.
Against the ledger
- It ranks 107th of the 1,272 incidents with a known loss, and 9th in 2024.
- It accounts for 21.8% of the $123.9m in known losses in September 2024.
- 61 incidents in the ledger are classified as Reentrancy, for $458.1m in total. This one is 5.9% of that.
- The ledger records no returned funds.
Closest in size by the same method
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 09 Jul 2025 | GMX V1 EVM | $42.0m | DeFi Protocol | Reentrancy | $40.0m |
| 18 Dec 2021 | Grim Finance | $30.0m | DeFi Protocol | Reentrancy | — |
| 19 Apr 2020 | dForce Lending | $25.0m | DeFi Protocol | Reentrancy | — |
| 30 Aug 2021 | CREAM Lending | $18.8m | DeFi Protocol | Reentrancy | — |
| 14 May 2021 | flash.sx / vaults.sx | $13.0m | DeFi Protocol | Reentrancy | — |
All failures in 2024 · The failures ledger
Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.
Cite this Bitminer.io, “Penpie, failures ledger”, data to 2 November 2026, https://bitminer.io/ledger/incident/penpie-2024-09-03/. How this is built