Incident All ledgers

ValueDefi: $10.0m

ValueDefi lost $10.0m on 5 May 2021. Ranked 198th of 1,272 crypto failures, with method, returned funds and comparable incidents.

Date: 5 May 2021
Lost: $10.0m
Returned or repaid: None recorded
Target: DeFi Protocol
Category: Access Control
Method: Improper Access Control
Chains: BSC

ValueDefi's vSwap pool on BSC lost about $10 million after an attacker abused an access-control flaw to re-initialize the pool, make themselves operator, and drain vBWAP/BUSD LP tokens and collateral via a recovery function.

Against the ledger

It ranks 198th of the 1,272 incidents with a known loss, and 39th in 2021.
It accounts for 3.5% of the $287.1m in known losses in May 2021.
225 incidents in the ledger are classified as Access Control, for $1.96bn in total. This one is 0.5% of that.
The ledger records no returned funds.

Other incidents named ValueDefi

Date	Target	Lost	Type	Method	Returned
07 May 2021	ValueDefi	$11.0m	DeFi Protocol	Arithmetic Error	—
14 Nov 2020	ValueDefi	$7.4m	DeFi Protocol	Spot Price Manipulation	—

Closest in size by the same method

Date	Target	Lost	Type	Method	Returned
02 Jun 2019	Kraken	$10.4m	CEX	Improper Access Control	—
08 May 2021	Rari Capital	$10.0m	DeFi Protocol	Arbitrary External Call	—
16 Jul 2024	LiFi Finance	$9.7m	DeFi Protocol	Token Approval Abuse	—
10 Aug 2021	Punk Protocol	$8.9m	DeFi Protocol	Delegatecall Hijack	—
28 Mar 2023	Safemoon	$8.9m	DeFi Protocol	Improper Access Control	—

All failures in 2021 · The failures ledger

Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.

Cite this Bitminer.io, “ValueDefi, failures ledger”, data to 2 November 2026, https://bitminer.io/ledger/incident/valuedefi-2021-05-05/. How this is built