Incident All ledgers
Transit Swap: $28.9m
Transit Swap lost $28.9m on 2 October 2022. Ranked 103rd of 1,272 crypto failures, with method, returned funds and comparable incidents.
- Date
- 2 October 2022
- Lost
- $28.9m
- Returned or repaid
- None recorded
- Target
- DeFi Protocol
- Category
- Input Validation
- Method
- Missing Input Validation
- Chains
- Ethereum, BSC
On 2022-10-02, an attacker abused a missing payer check in Transit Swap's claimTokens function to drain $28.9 million from wallets that had approved the contract on Ethereum and BSC. The attacker was traced and returned funds the next day.
Against the ledger
- It ranks 103rd of the 1,272 incidents with a known loss, and 16th in 2022.
- It accounts for 3.8% of the $750.9m in known losses in October 2022.
- 66 incidents in the ledger are classified as Input Validation, for $755.5m in total. This one is 3.8% of that.
- The ledger records no returned funds.
Other incidents named Transit
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 13 May 2026 | Transit Finance | $1.9m | DeFi Protocol | Improper Access Control | — |
| 20 Apr 2026 | Transit Finance | $257,800 | DeFi Protocol | Protocol Logic | — |
| 20 Dec 2023 | Transit Finance | $110,000 | DeFi Protocol | Missing Input Validation | — |
Closest in size by the same method
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 23 Mar 2022 | Cashio | $52.8m | DeFi Protocol | Missing Input Validation | — |
| 19 Apr 2024 | Hedgey | $44.7m | DeFi Protocol | Missing Input Validation | — |
| 15 Nov 2024 | ThalaSwap | $25.5m | DeFi Protocol | Missing Input Validation | — |
| 22 Nov 2020 | Pickle | $19.7m | DeFi Protocol | Missing Input Validation | — |
| 27 Oct 2022 | Team Finance | $15.8m | DeFi Protocol | Missing Input Validation | — |
All failures in 2022 · The failures ledger
Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.
Cite this Bitminer.io, “Transit Swap, failures ledger”, data to 2 November 2026, https://bitminer.io/ledger/incident/transit-swap-2022-10-02/. How this is built