Incident All ledgers
Pickle: $19.7m
Pickle lost $19.7m on 22 November 2020. Ranked 139th of 1,272 crypto failures, with method, returned funds and comparable incidents.
- Date
- 22 November 2020
- Lost
- $19.7m
- Returned or repaid
- None recorded
- Target
- DeFi Protocol
- Category
- Input Validation
- Method
- Missing Input Validation
- Chains
- Ethereum
Pickle lost about $19.7M after an attacker exploited missing jar whitelisting in its ControllerV4 swap function. Fake jars were used to drain roughly 19.76M DAI from the pDAI jar.
Against the ledger
- It ranks 139th of the 1,272 incidents with a known loss, and 5th in 2020.
- It accounts for 48.2% of the $40.9m in known losses in November 2020.
- 66 incidents in the ledger are classified as Input Validation, for $755.5m in total. This one is 2.6% of that.
- The ledger records no returned funds.
Closest in size by the same method
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 02 Oct 2022 | Transit Swap | $28.9m | DeFi Protocol | Missing Input Validation | — |
| 15 Nov 2024 | ThalaSwap | $25.5m | DeFi Protocol | Missing Input Validation | — |
| 27 Oct 2022 | Team Finance | $15.8m | DeFi Protocol | Missing Input Validation | — |
| 28 Mar 2024 | PrismaLST | $11.6m | DeFi Protocol | Missing Input Validation | — |
| 21 Jul 2026 | Wanchain | $10.0m | Chain | Signature Verification Flaw | — |
All failures in 2020 · The failures ledger
Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.
Cite this Bitminer.io, “Pickle, failures ledger”, data to 2 November 2026, https://bitminer.io/ledger/incident/pickle-2020-11-22/. How this is built