Digital Asset
Intelligence
Security Incident · ETH Ecosystem

Hinkal Smart Contract Vulnerability: $820.00K Reported Loss

·Historical incident record

Incident Overview

Hinkal privacy DeFi protocol's Ethereum contract was exploited. The attacker used a "proofless deposit" vulnerability to drain approximately $820K USDC, then converted it to ETH and laundered via Tornado Cash and THORChain. The team paused contracts, limited the incident to one Ethereum pool, and committed to 1:1 user compensation.

Sources & References

Original incident referencehttps://x.com/hinkal_protocol/status/2073136163880149417 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodSupply Chain Attack
    Reported loss$ 3,100,000
  2. Incident date
    Attack methodOracle Price Manipulation
    Reported loss$ 9,050,000
  3. Incident date
    Attack methodSmart Contract Logic Vulnerability
    Reported loss$ 8,500
  4. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 6,040,000
  5. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 403,000