shield Flash Loan Attack · $700K loss

DODO Hack: How $700K Was Lost in a Flash Loan Attack (2021)

On March 2021, DODO was exploited in a flash loan attack, resulting in approximately $700K in losses. That makes the DODO exploit the 106th largest DeFi incident out of 690 documented in our archive.

Attack Mechanics: How the DODO Flash Loan Attack Played Out

Exploit Class Applied to DODO

The DODO incident on March 8, 2021 is classified as a Flash Loan Attack. Attackers borrow huge amounts via uncollateralised single-transaction loans and manipulate protocol state before repaying in the same block. In the full archive, DODO is 1 of 27 documented flash loan attack incidents.

DODO in Context

At $700K, the DODO exploit is a minor (<$1M) event compared to the largest same-class incident in our archive — PolterFinance (2024) at $7M.

Prior Flash Loan Attack Before DODO

The nearest flash loan attack incident before DODO was Harvest Finance, 133 days earlier on October 26, 2020 ($33 lost). The same exploit class surfaced again within the flash loan attack attack surface.

DODO Vulnerability Signature

The primary source categorises the DODO exploit specifically as “Flashloan Attack”. This narrower label is entity-specific: it reflects how the DODO contract failed, rather than the broad flash loan attack pattern alone.

Impact & Recovery for DODO

DODO Loss Figure

The DODO exploit caused $700,000 in losses — a minor (<$1M) incident and the 7th largest of 37 documented in 2021. This single incident represents 0.3% of all tracked losses that year.

Where DODO Sits Among Flash Loan Attack Attacks

Ranked by loss size, DODO is the 5th largest of 27 flash loan attack incidents documented. That puts the DODO loss above the class average of $577.3K.

Timeline Since the DODO Incident

The DODO exploit occurred 5.1 years ago (1,863 days). The contract, its fork-block, and the attack transaction remain on-chain and forensically reproducible.

Primary Reference for DODO

Public post-mortem / on-chain analysis for the DODO incident: view source.

FAQ

How much did DODO lose?

The DODO exploit in March 2021 resulted in $700,000 in losses — the 7th largest of 37 DeFi incidents that year.

When did the DODO hack happen?

The DODO exploit was recorded on March 8, 2021 — 1,863 days ago.

What type of exploit hit DODO?

The DODO incident is classified as a Flash Loan Attack. Attackers borrow huge amounts via uncollateralised single-transaction loans and manipulate protocol state before repaying in the same block.

How common is the Flash Loan Attack pattern seen at DODO?

Our archive contains 27 documented flash loan attack incidents. The DODO incident is one of them.

How does DODO compare to the largest Flash Loan Attack attack?

The largest flash loan attack incident in our archive is PolterFinance (2024) at $7M. The DODO loss is $700K.

How do adversarial examples challenge the reliability of deep learning models?

By showing that small, often imperceptible, modifications to input data can lead to incorrect model predictions.

Which cryptocurrencies did the study focus on for its analysis?

The study focused on a diverse range of cryptocurrencies including high capitalization, solid projects, and meme coins.