Hacks

Crypto hacks using Arbitrary External Call

Data as of 3 October 2026

30 recorded incidents using Arbitrary External Call took $37.1M in total between 2021 and 2026. The largest was Rari Capital, $10.0M in 2021. That is 2.3% of all incidents in DefiLlama's record and 0.2% of the value lost. Amounts are the losses DefiLlama records, and its record does not say whether they are before or after any recovery. Data as of 3 October 2026.

By year, using Arbitrary External Call

2021 $10.0M lost

1 incidents
2022 $3.4M lost

4 incidents
2023 $8.6M lost

7 incidents
2024 $6.1M lost

8 incidents
2025 $5.8M lost

2 incidents
2026 $3.2M lost

8 incidents

Incidents per year using Arbitrary External Call, with value lost in millions of US dollars. Source: DefiLlama, retrieved 3 October 2026.

Incidents using Arbitrary External Call

Incidents using Arbitrary External Call. Newest first. Source: DefiLlama.
Date	Incident	Class	Technique	Chains	Amount
2026-09-21	The Internet Token	Access Control	Arbitrary External Call	Base	$16K
2026-09-11	ether.fi Liquid	Access Control	Arbitrary External Call	Ethereum	$43K
2026-08-31	Aquifer	Access Control	Arbitrary External Call	Solana	$2.5M
2026-08-05	Unistreets	Access Control	Arbitrary External Call	Ethereum	$18K
2026-05-13	ShapeShift FOX Colony	Access Control	Arbitrary External Call	Arbitrum	$133K
2026-04-28	Quant	Access Control	Arbitrary External Call	Ethereum	$138K
2026-04-19	Custom sAVAX Rebalancer	Access Control	Arbitrary External Call	Avalanche	$64K
2026-01-06	Fusion by IPOR	Access Control	Arbitrary External Call	Arbitrum	$336K
2025-09-27	Hyperdrive HL Lending	Access Control	Arbitrary External Call	Hyperliquid L1	$782K
2025-03-07	1inch Swap	Access Control	Arbitrary External Call	Ethereum	$5.0M
2024-08-28	Aave	Access Control	Arbitrary External Call	Ethereum	$56K
2024-07-24	Spectra Finance	Access Control	Arbitrary External Call	Ethereum	$73K
2024-07-12	Dough Finance	Access Control	Arbitrary External Call	Ethereum	$2.0M
2024-05-31	MixedSwapRouter	Access Control	Arbitrary External Call	Arbitrum	$16K
2024-04-20	Rico	Access Control	Arbitrary External Call	Arbitrum	$0
2024-04-15	Chainge Finance	Access Control	Arbitrary External Call	BSC	$716K
2024-03-08	Unizen	Access Control	Arbitrary External Call	Ethereum	$2.1M
2024-01-17	BasketDAO	Access Control	Arbitrary External Call	Ethereum	$1.2M
2023-12-17	Flooring Protocol	Access Control	Arbitrary External Call	Ethereum	$1.6M
2023-10-23	Maestro	Access Control	Arbitrary External Call	Ethereum	$500K
2023-07-28	Pond0x	Access Control	Arbitrary External Call	Ethereum	$2.2M
2023-02-20	Dexible V2	Access Control	Arbitrary External Call	Ethereum, Arbitrum	$2.0M
2023-02-20	Hope Finance	Access Control	Arbitrary External Call	Arbitrum	$2.0M
2023-02-20	Revert Finance	Access Control	Arbitrary External Call	Ethereum	$29K
2023-02-07	CoWSwap	Access Control	Arbitrary External Call	Ethereum	$180K
2022-12-25	Rubic	Access Control	Arbitrary External Call	Ethereum	$1.4M
2022-11-09	Brahma Finance	Access Control	Arbitrary External Call	Ethereum	$89K
2022-03-30	BasketDAO	Access Control	Arbitrary External Call	Ethereum	$1.2M
2022-03-26	Auctus	Access Control	Arbitrary External Call	Ethereum	$726K
2021-05-08	Rari Capital	Access Control	Arbitrary External Call	Ethereum	$10.0M

Source: DefiLlama, retrieved 3 October 2026, under its open methodology. Figures are a dated snapshot, not a live feed.