Home Data Hacks Token Approval Abuse Hacks
Crypto hacks using Token Approval Abuse
Data as of 3 October 2026
23 recorded incidents using Token Approval Abuse took $28.9M in total between 2022 and 2026. The largest was LiFi Finance, $9.7M in 2024. That is 1.8% of all incidents in DefiLlama's record and 0.1% of the value lost. Amounts are the losses DefiLlama records, and its record does not say whether they are before or after any recovery. Data as of 3 October 2026.
By year, using Token Approval Abuse 2022 $600K lost
1 incidents 2023 $3.0M lost
6 incidents 2024 $16.4M lost
4 incidents 2025 $1.3M lost
5 incidents 2026 $7.5M lost
7 incidents Incidents per year using Token Approval Abuse, with value lost in millions of US dollars. Source: DefiLlama, retrieved 3 October 2026. Incidents using Token Approval Abuse Incidents using Token Approval Abuse. Newest first. Source: DefiLlama.
Date Incident Class Technique Chains Amount 2026-09-24 Limit Break Payment Processor Access Control Token Approval Abuse Ethereum , ApeChain, Polygon , Base $1.8M 2026-06-09 Asterix Access Control Token Approval Abuse Ethereum $40K 2026-05-25 Bitmor Access Control Token Approval Abuse Base $6K 2026-05-05 Ekubo Access Control Token Approval Abuse Ethereum $1.4M 2026-04-27 ZetaChain Access Control Token Approval Abuse Ethereum , Base , Polygon , Arbitrum , Avalanche , BSC $334K 2026-03-09 Gondi V3 Access Control Token Approval Abuse Ethereum $230K 2026-01-25 Aperture LM Access Control Token Approval Abuse Ethereum , Base , BSC $3.7M 2025-12-12 ZEROBASE Access Control Token Approval Abuse BSC $250K 2025-12-02 Goldfinch Access Control Token Approval Abuse Ethereum $330K 2025-11-20 Dexmax AI Access Control Token Approval Abuse Ethereum $130K 2025-08-13 Coinbase Access Control Token Approval Abuse Ethereum $300K 2025-01-02 MoonHacker Access Control Token Approval Abuse Optimism $300K 2024-12-01 Spectral Labs Access Control Token Approval Abuse Ethereum $250K 2024-11-20 MainnetSettler Access Control Token Approval Abuse Ethereum $66K 2024-07-16 LiFi Finance Access Control Token Approval Abuse zkSync Era, Linea, Metis $9.7M 2024-02-28 Seneca Access Control Token Approval Abuse Ethereum , Arbitrum $6.4M 2023-10-31 Unibot Access Control Token Approval Abuse Ethereum $640K 2023-07-09 CivFund Access Control Token Approval Abuse Ethereum $180K 2023-06-19 Ara Finance Access Control Token Approval Abuse BSC $125K 2023-06-15 Hashflow Access Control Token Approval Abuse Ethereum , Arbitrum , Avalanche , BSC , Polygon $605K 2023-06-02 Hector Lending Access Control Token Approval Abuse Fantom $653K 2023-04-12 MetaPoint Access Control Token Approval Abuse BSC $820K 2022-03-21 LI.FI Access Control Token Approval Abuse Ethereum $600K
What this measures, and what it does not Incidents, classes, techniques and amounts are DefiLlama's record. Its dashboard and documentation give no method note: they do not say how incidents enter the record, which date's prices an amount uses, or whether amounts are before or after any recovery. If the record depends on public reporting, it will be most complete for the largest events on the most watched chains, so a chain's count may reflect where value and attention concentrate as much as where code is weakest. Chain figures overlap: a multi-chain incident counts in full on every chain it touched. Absence from this record is not evidence of safety.
Read: How crypto gets hacked: the incidents, classified
Source: DefiLlama , retrieved 3 October 2026,
under its open methodology. Figures are a dated snapshot, not a live feed.