Ambient Hack

Reported loss $111K
Ethereum
Deposit Logic Flaw

What happened

Ambient Finance's CrocSwapDex on Ethereum was exploited on 7 June 2026. Public alerts and transaction analysis reported an approximately $110,600 loss, with the transaction withdrawing about 83.72 ETH before repayments and transaction costs.

How it happened

  1. Public analysis reports that an attacker flash-borrowed assets and repeatedly cycled CrocSwapDex swap and LP mint/burn command paths.
  2. The reported sequence then used the protocol's surplus-disbursement path to withdraw ETH.

Protocol details

Classification Protocol Logic
Protocol Type DEX
Implementation language Solidity
Protocol links Website @ambient_finance

Evidence

Same attack technique

Browse all hacks →
Polygon Ocean Protocol $128K lost Base Base Lending $1.0M lost Ethereum Art Coin $331K lost

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes