Ambient Finance (June 2026) hack — June 2026
Incident facts
| Date of incident | |
|---|---|
| Publicly disclosed | June 8, 2026 |
| Target type | Decentralised exchange |
| Loss | $114,500Price at time of incident |
| Method | Contract logic errorA helper contract deposited flash-loaned WETH as native surplus on Ambient's CrocSwap DEX, moved the ETH/USDC pool one grid step at a time, minted and harvested a narrow range and withdrew more surplus than it had put in |
| Chains | Ethereum |
| Outcome | Unresolved |
What happened
Ambient Finance, a DEX on Ethereum built on the CrocSwap contract, lost about 67.85 ETH, roughly $114,500, on 7 June 2026, in a transaction at 15:26:35 UTC. TenArmor flagged it the next day, estimating the loss at about $110,600.
According to a DeFiHackLabs reconstruction, a helper contract deposited flash-loaned WETH with the DEX as native surplus, walked the ETH/USDC pool's price up one grid step at a time, minted and harvested a narrow liquidity range, then withdrew all the native surplus credited to it and repaid the Balancer flash loan. Ambient has not published an explanation.
This registry read the receipt: the DEX contract paid out 55,913.81 USDC, which the attacker swapped for 34.13 WETH, alongside native ETH that does not appear in the token logs; DeFiHackLabs puts the total at 67.85 ETH. At that hour's ETH price that is about $114,500, the figure recorded, with TenArmor's $110,600 as the lower end.
Sources
- TenArmor on XSecondary · retrieved 2026-10-06
- DeFiHackLabs exploit reconstructionSecondary · retrieved 2026-10-06
- Ethereum transaction receipt, read by this registryOn-chain · retrieved 2026-10-06
Changes to this entry
- Recorded on 6 October 2026 in a backfill of 2026 incidents that this registry had missed, found through DeFiHackLabs' reproduction list. The amount was checked against the transaction receipt, read by this registry from a public node.
Cite this
This data is published under CC BY 4.0. You may reuse it, including commercially, as long as you credit iTokenly and link back.
iTokenly Hack Registry, "Ambient Finance (June 2026) hack — June 2026", iTokenly, accessed 2026-10-06, https://itokenly.com/hacks/ambient-finance-june-2026https://itokenly.com/hacks/ambient-finance-june-2026Permalinks never change. If an entry is renamed, the old address keeps working.
Spotted an error? Write to [email protected]. Corrections to published figures are logged on this page. See the methodology for how entries are checked.