Digital Asset
Intelligence
Security Incident · ETH Ecosystem

Ambient Finance Smart Contract Vulnerability: $110.60K Reported Loss

·Historical incident record

Incident Overview

Ambient Finance (formerly CrocSwap) was exploited via an accounting logic flaw in surplus collateral handling. The attacker used a flash loan and rapid cycling through HotProxy/WarmPath/ColdPath operations to drain ~83.72 ETH (~$110.6K) from the protocol’s monolithic smart contract.

Sources & References

Original incident referencehttps://www.cryptotimes.io/2026/06/08/ethereum-defi-protocol-ambient-finance-suffers-110k-drain/ (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodDNS Attack
    Reported lossNot disclosed
  2. Incident date
    Attack methodPrivate Key Leakage
    Reported loss$ 31,000,000
  3. Incident date
    Target

    NovaBox

    Attack methodFlash Loan Attack
    Reported loss$ 93,600
  4. Incident date
    Attack methodMalicious Governance Takeover
    Reported loss$ 1,580,000
  5. Incident date
    Attack methodSmart Contract Vulnerability
    Reported lossNot disclosed