shield Reentrancy · $1 loss

Hundred Finance Hack: How $1 Was Lost in a Reentrancy (2022)

On March 2022, Hundred Finance was exploited in a reentrancy, resulting in approximately $1 in losses. That makes the Hundred Finance exploit the 474th largest DeFi incident out of 690 documented in our archive.

Attack Mechanics: How the Hundred Finance Reentrancy Played Out

Exploit Class Applied to Hundred Finance

The Hundred Finance incident on March 13, 2022 is classified as a Reentrancy. A malicious contract re-enters a vulnerable function before state is updated, letting it drain funds multiple times. In the full archive, Hundred Finance is 1 of 51 documented reentrancy incidents.

Hundred Finance in Context

At $1, the Hundred Finance exploit is a minor (<$1M) event compared to the largest same-class incident in our archive — Curve (2023) at $41M.

Prior Reentrancy Before Hundred Finance

The nearest reentrancy incident before Hundred Finance was Bacon Protocol, 8 days earlier on March 5, 2022 ($1 lost). The same exploit class surfaced again within the reentrancy attack surface.

Hundred Finance Vulnerability Signature

The primary source categorises the Hundred Finance exploit specifically as “ERC667 Reentrancy”. This narrower label is entity-specific: it reflects how the Hundred Finance contract failed, rather than the broad reentrancy pattern alone.

Impact & Recovery for Hundred Finance

Hundred Finance Loss Figure

The Hundred Finance exploit caused $1 in losses — a minor (<$1M) incident and the 67th largest of 129 documented in 2022.

Where Hundred Finance Sits Among Reentrancy Attacks

Ranked by loss size, Hundred Finance is the 31st largest of 51 reentrancy incidents documented. That puts the Hundred Finance loss below the class average of $2.87M.

Timeline Since the Hundred Finance Incident

The Hundred Finance exploit occurred 4.1 years ago (1,493 days). The contract, its fork-block, and the attack transaction remain on-chain and forensically reproducible.

Primary Reference for Hundred Finance

Public post-mortem / on-chain analysis for the Hundred Finance incident: view source.

FAQ

How much did Hundred Finance lose?

The Hundred Finance exploit in March 2022 resulted in $1 in losses — the 67th largest of 129 DeFi incidents that year.

When did the Hundred Finance hack happen?

The Hundred Finance exploit was recorded on March 13, 2022 — 1,493 days ago.

What type of exploit hit Hundred Finance?

The Hundred Finance incident is classified as a Reentrancy. A malicious contract re-enters a vulnerable function before state is updated, letting it drain funds multiple times.

How common is the Reentrancy pattern seen at Hundred Finance?

Our archive contains 51 documented reentrancy incidents. The Hundred Finance incident is one of them.

How does Hundred Finance compare to the largest Reentrancy attack?

The largest reentrancy incident in our archive is Curve (2023) at $41M. The Hundred Finance loss is $1.

What findings does the study reveal about the relationship between trading volume and cryptocurrency volatility using the GARCH (1,1) model?

The study finds a strong positive effect of trading volume on the volatility of cryptocurrency returns, highlighting its significant impact.

How do zk-SNARKs contribute to the anonymity of transactions?

They allow the system to prove the validity of transactions without revealing any underlying data, ensuring anonymity.