bZx Hack

TOTAL LOST $8.1M
Medium Other ethereum

What happened

Quick Summary

bZx's flawed code allowed an attacker to duplicate assets, leading to a loss of approximately $8.1 million.

Details of the Exploit

The bug in bZx's code allowed the attacker to increase their balance of iTokens (interest-bearing tokens of bZx). The attacker was able to mint 219,200 LINK tokens (worth about $2.6 million); 4,503 ETH (~$1.6 million); 1,756,351 USDT (~$1.7 million); 1,412,048 USDC (~$1.4 million) and 667,989 DAI (~$680,000). The total loss amounted to approximately $8.1 million.

bZx has assured that no user funds are at risk as the loss is being covered by its insurance fund.

Case & protocol details

Classification Other
Protocol Type Exploit/Other
Affected asset / contract BZRX
Official Website bzx.network/
Protocol Twitter/X @bzxHQ

Security review history

  • ZK Labs 2018-09-01 No public report
  • CertiK 2020-09-04 No public report

Funds Recovery

100.0%

Recovered

$8.1M

Net Loss

$0

Evidence & learning

Sources and on-chain records

Browse all hacks

Other incidents recorded with the same attack technique.

Aquifer $2.5M
Term Labs $8.5M
Harmony $300K
Coreum $200K

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes