Prisma Finance exploit on 2024-03-28 ($12M reported)
Exploit on Ethereum, 28 Mar 2024. Reported loss $12M. Last verified 4 Nov 2026.
major
Reported loss
$12M
as reported by the sources
Recovered
-
nothing reported
Status
Unknown
updated 26 Oct 2026
Date
Ethereum
Summary
On 2024-03-28 a vulnerability in the MigrateTroveZap helper contracts of the Ethereum stablecoin protocol Prisma Finance let exploiters drain collateral from troves of users who had approved the contract, a loss of 3,479.24 ETH (about $12 million); the emergency multisig paused the protocol.
- Protocol
- Prisma Finance
- Type
- Exploit
- Reported loss
- $12,000,000 · as stated: 3,479.24 ETH source: hackmd.io ↗
Facts and where they come from
| Fact | Value | Source |
|---|---|---|
| Date | March 28th, 2024 | hackmd.io ↗ |
| Amount | 3,479.24 ETH | hackmd.io ↗ |
| Amount (USD) | approximately $12 million USD | hackmd.io ↗ |
| Response | emergency multi-sig paused the protocol | hackmd.io ↗ |
| Attacker address | 0x7e39e3b3ff7adef2613d5cc49558eab74b9a4202 | hackmd.io ↗ |
Primary sources
- Prisma Finance: Incident March 28, 2024 post-mortem ↗ post-mortem · accessed 2026-11-04
Our own summary of facts published by the sources above. We do not attribute fault beyond them. Amounts are as the sources state them (no USD conversion by us); links and quoted figures last checked 2026-11-04.
Get the next one first
- Alert on new security incidents: hacks, depegs, TVL drops and exchange outflows, by e-mail or Telegram