Refreshed 1h ago· updates every 6h
Hinkal (2026) — Crypto Hack
ExploitedJul 1, 2026·
Ethereum
Amount Stolen
$820K
~$820K USDC; 410 ETH via Tornado Cash + 44.7 ETH bridged to BTC via THORChain
Recovered
$0
Attacker skipped Hinkal's zk verification with a 'Proofless Deposit' bug that bypassed ZK verification, draining ~$820K in USDC on Ethereum.
Summary
Attacker skipped Hinkal's zk verification with a 'Proofless Deposit' bug that bypassed ZK verification, draining ~$820K in USDC on Ethereum.
How It Was Compromised — ZK via Proofless Deposit Bug / ZK Verification Bypass
ZKProofless Deposit Bug / ZK Verification Bypass
On July 1, 2026, an attacker skipped Hinkal's zk verification with a 'Proofless Deposit' bug that bypassed ZK verification, draining approximately $820K in USDC on Ethereum. The attacker laundered 410 ETH via Tornado Cash plus 44.7 ETH bridged to Bitcoin over THORChain.
Fund Flow & Laundering Analysis
Laundered 410 ETH via Tornado Cash plus 44.7 ETH bridged to Bitcoin over THORChain. No recovery reported at time of writing.
Related Incidents
Kelp DAO
Kelp DAO (2026) — Bridge Exploit on Ethereum, Arbitrum
$292.0M
2026·Partially Recovered
KelpDAO
KelpDAO (2026) — Bridge Exploit on Ethereum, Arbitrum
$292.0M
2026·Partially Recovered
Kelp DAO
Kelp DAO (2026) — Bridge on Ethereum
$292.0M
2026·Ongoing
Humanity Protocol
Humanity Protocol (2026) — Private Key Compromise on Ethereum, BNB Chain
$43.0M
2026·Funds Laundered
Humanity Protocol
Humanity Protocol (2026) — Private Key Compromise on Ethereum, BNB Chain
$43.0M
2026·Funds Laundered
Humanity Protocol
Humanity Protocol (2026) — Key Compromise on Ethereum, BNB Chain
$36.0M
2026·Exploited