Digital Asset
Intelligence
Security Incident · Polygon Ecosystem

Ink Finance Smart Contract Vulnerability: $140.00K Reported Loss

·Historical incident record

Incident Overview

Ink Finance’s Workspace Treasury Proxy contract on Polygon was exploited due to a whitelist validation logic flaw. The attacker deployed a malicious contract matching a whitelisted claimer address, passed authentication checks via the claim() function, and drained approximately $140,000 USDT (amplified with a ~$25K Balancer V2 flash loan).

Sources & References

Original incident referencehttps://www.cryptotimes.io/2026/05/11/ink-finance-exploited-on-polygon-140k-usdt-drained-in-flash-loan-attack/ (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 101,400
  2. Incident date
    Attack methodPrivate Key Leakage
    Reported loss$ 573,200
  3. Incident date
    Target

    Royal.io

    Attack methodSmart Contract Vulnerability
    Reported loss$ 263,000
  4. Incident date
    Target

    Allbridge

    Attack methodBridge Logic Flaw
    Reported loss$ 190,000
  5. Incident date
    Attack methodThe X account was hacked
    Reported loss0