shield Price Manipulation · $8M loss

Jimbo Hack: How $8M Was Lost in a Price Manipulation (2023)

On May 2023, Jimbo was exploited in a price manipulation, resulting in approximately $8M in losses. That makes the Jimbo exploit the 35th largest DeFi incident out of 690 documented in our archive.

Attack Mechanics: How the Jimbo Price Manipulation Played Out

Exploit Class Applied to Jimbo

The Jimbo incident on May 29, 2023 is classified as a Price Manipulation. The attacker drives the on-chain price of a token up or down within a single transaction to extract value from the protocol. In the full archive, Jimbo is 1 of 85 documented price manipulation incidents.

Jimbo in Context

At $8M, the Jimbo exploit is a significant ($1M–$10M) event compared to the largest same-class incident in our archive — CreamFinance (2021) at $130M.

Prior Price Manipulation Before Jimbo

The nearest price manipulation incident before Jimbo was SellToken02, 16 days earlier on May 13, 2023 ($197K lost). The same exploit class surfaced again within the price manipulation attack surface.

Jimbo Vulnerability Signature

The primary source categorises the Jimbo exploit specifically as “Protocol Specific Price Manipulation”. This narrower label is entity-specific: it reflects how the Jimbo contract failed, rather than the broad price manipulation pattern alone.

Impact & Recovery for Jimbo

Jimbo Loss Figure

The Jimbo exploit caused $8,000,000 in losses — a significant ($1M–$10M) incident and the 10th largest of 214 documented in 2023. This single incident represents 1.2% of all tracked losses that year.

Where Jimbo Sits Among Price Manipulation Attacks

Ranked by loss size, Jimbo is the 6th largest of 85 price manipulation incidents documented. That puts the Jimbo loss above the class average of $3.9M.

Timeline Since the Jimbo Incident

The Jimbo exploit occurred 2.9 years ago (1,051 days). The contract, its fork-block, and the attack transaction remain on-chain and forensically reproducible.

Primary Reference for Jimbo

Public post-mortem / on-chain analysis for the Jimbo incident: view source.

FAQ

How much did Jimbo lose?

The Jimbo exploit in May 2023 resulted in $8,000,000 in losses — the 10th largest of 214 DeFi incidents that year.

When did the Jimbo hack happen?

The Jimbo exploit was recorded on May 29, 2023 — 1,051 days ago.

What type of exploit hit Jimbo?

The Jimbo incident is classified as a Price Manipulation. The attacker drives the on-chain price of a token up or down within a single transaction to extract value from the protocol.

How common is the Price Manipulation pattern seen at Jimbo?

Our archive contains 85 documented price manipulation incidents. The Jimbo incident is one of them.

How does Jimbo compare to the largest Price Manipulation attack?

The largest price manipulation incident in our archive is CreamFinance (2021) at $130M. The Jimbo loss is $8M.

How is the payment channel established between two parties?

By freezing a certain amount of zero-knowledge currency and establishing terms for secure and private transactions.

What are the key dimensions of SRQ analyzed?

Availability, credibility, and strategic anchorage.