T
iTokenly

Premia V3 underwriter vaults (November 2026) hack — November 2026

Verified — 2 sourcesLast checked November 2, 2026

Incident facts

Date of incident
Publicly disclosedNovember 1, 2026
Target typeDecentralised exchange
Loss$464,600Price at time of incident
MethodContract logic errorThe attacker created empty option pools and used flash-loaned funds to buy options that locked vault collateral into them, then withdrew that collateral as liquidity
ChainsArbitrum
OutcomeUnresolved

What happened

At about 03:15 UTC on 1 November 2026 an attacker drained six Premia V3 underwriter vaults on Arbitrum. Premia Labs is the company behind the Kyan derivatives platform. According to Blockaid, the attacker created empty option pools, used flash loans to buy options so that vault collateral was locked into those pools, and then withdrew it as liquidity.

Blockaid’s alert, sent while the attack was still under way, counted about $400,500 across two transactions; PeckShield later put the loss at about $464,600. Crypto.news lists 3.64 WBTC, about 43.47 WETH, 48,479 USDC.e and 46,215 ARB taken. The attacker moved the funds to Ethereum and swapped them into BTC through Chainflip and NEAR Intents. No statement from Premia had been found when this was recorded.

Sources

  1. Blockaid on X (1 November 2026)Secondary · retrieved 2026-11-02
  2. crypto.news (1 November 2026)Secondary · retrieved 2026-11-02

Changes to this entry

  • Recorded at PeckShield’s figure; Blockaid’s in-progress count is the low end. Add Premia’s statement when it publishes one.

Cite this

This data is published under CC BY 4.0. You may reuse it, including commercially, as long as you credit iTokenly and link back.

iTokenly Hack Registry, "Premia V3 underwriter vaults (November 2026) hack — November 2026", iTokenly, accessed 2026-11-02, https://itokenly.com/hacks/premia-v3-vaults-november-2026
https://itokenly.com/hacks/premia-v3-vaults-november-2026

Permalinks never change. If an entry is renamed, the old address keeps working.

Spotted an error? Write to [email protected]. Corrections to published figures are logged on this page. See the methodology for how entries are checked.