shield Reentrancy · $220K loss

Market Hack: How $220K Was Lost in a Reentrancy (2022)

On October 2022, Market was exploited in a reentrancy, resulting in approximately $220K in losses. That makes the Market exploit the 157th largest DeFi incident out of 690 documented in our archive.

Attack Mechanics: How the Market Reentrancy Played Out

Exploit Class Applied to Market

The Market incident on October 24, 2022 is classified as a Reentrancy. A malicious contract re-enters a vulnerable function before state is updated, letting it drain funds multiple times. In the full archive, Market is 1 of 51 documented reentrancy incidents.

Market in Context

At $220K, the Market exploit is a minor (<$1M) event compared to the largest same-class incident in our archive — Curve (2023) at $41M.

Prior Reentrancy Before Market

The nearest reentrancy incident before Market was Thunder Brawl, 23 days earlier on October 1, 2022. The same exploit class surfaced again within the reentrancy attack surface.

Market Vulnerability Signature

The primary source categorises the Market exploit specifically as “Read-only Reentrancy”. This narrower label is entity-specific: it reflects how the Market contract failed, rather than the broad reentrancy pattern alone.

Impact & Recovery for Market

Market Loss Figure

The Market exploit caused $220,000 in losses — a minor (<$1M) incident and the 17th largest of 129 documented in 2022. This single incident represents 0.1% of all tracked losses that year.

Where Market Sits Among Reentrancy Attacks

Ranked by loss size, Market is the 19th largest of 51 reentrancy incidents documented. That puts the Market loss below the class average of $2.87M.

Timeline Since the Market Incident

The Market exploit occurred 3.5 years ago (1,268 days). The contract, its fork-block, and the attack transaction remain on-chain and forensically reproducible.

Primary Reference for Market

Public post-mortem / on-chain analysis for the Market incident: view source. Secondary narrative coverage: Co-owner of shuttered Polish crypto exchange Bitmarket found dead.

FAQ

How much did Market lose?

The Market exploit in October 2022 resulted in $220,000 in losses — the 17th largest of 129 DeFi incidents that year.

When did the Market hack happen?

The Market exploit was recorded on October 24, 2022 — 1,268 days ago.

What type of exploit hit Market?

The Market incident is classified as a Reentrancy. A malicious contract re-enters a vulnerable function before state is updated, letting it drain funds multiple times.

How common is the Reentrancy pattern seen at Market?

Our archive contains 51 documented reentrancy incidents. The Market incident is one of them.

How does Market compare to the largest Reentrancy attack?

The largest reentrancy incident in our archive is Curve (2023) at $41M. The Market loss is $220K.

How does the payment channel update phase function?

It allows the redistribution of locked funds based on off-chain transactions between parties.

How does the paper address the long-term security concerns associated with blockchain signatures?

By incorporating the post-quantum signature scheme Dilithium, the paper addresses long-term security concerns against quantum computing threats.