Incident All ledgers
Rari Capital: $10.0m
Rari Capital lost $10.0m on 8 May 2021. Ranked 197th of 1,272 crypto failures, with method, returned funds and comparable incidents.
- Date
- 8 May 2021
- Lost
- $10.0m
- Returned or repaid
- None recorded
- Target
- DeFi Protocol
- Category
- Access Control
- Method
- Arbitrary External Call
- Chains
- Ethereum
On May 8, 2021, an attacker used a dYdX flash loan and an arbitrary call in ibETH to inflate ibETH's reported total ETH, letting them withdraw more than deposited from Rari Capital's Ethereum Pool. The record lists the loss as $10M, though it also describes about $11M drained.
Against the ledger
- It ranks 197th of the 1,272 incidents with a known loss, and 38th in 2021.
- It accounts for 3.5% of the $287.1m in known losses in May 2021.
- 225 incidents in the ledger are classified as Access Control, for $1.96bn in total. This one is 0.5% of that.
- The ledger records no returned funds.
Other incidents named Rari
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 01 May 2022 | Rari Capital | $80.0m | DeFi Protocol | Reentrancy | — |
| 18 Dec 2025 | Rari Capital | $2.0m | DeFi Protocol | Uninitialized Proxy | — |
Closest in size by the same method
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 02 Jun 2019 | Kraken | $10.4m | CEX | Improper Access Control | — |
| 05 May 2021 | ValueDefi | $10.0m | DeFi Protocol | Improper Access Control | — |
| 16 Jul 2024 | LiFi Finance | $9.7m | DeFi Protocol | Token Approval Abuse | — |
| 10 Aug 2021 | Punk Protocol | $8.9m | DeFi Protocol | Delegatecall Hijack | — |
| 28 Mar 2023 | Safemoon | $8.9m | DeFi Protocol | Improper Access Control | — |
All failures in 2021 · The failures ledger
Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.
Cite this Bitminer.io, “Rari Capital, failures ledger”, data to 2 November 2026, https://bitminer.io/ledger/incident/rari-capital-2021-05-08/. How this is built