Truebit exploit analysis
Truebit's dispute-game bond calculation had an arithmetic overflow that let the attacker post a sub-cent bond and walk the full dispute reward out. DeFiHackLabs reconstructs the on-chain drain.
- Reported loss
- 8540ETH, per DeFiHackLabs
- Occurred
- Logged
- Source
- DeFiHackLabs
Logged as “2026-01-09: Overflow on Truebit”.
Analysis1 min read
Truebit's dispute game had an arithmetic overflow in the bond calculation that allowed the attacker to commit a solver bond of a tiny amount while crediting the dispute reward at full unit value. The attacker opened a dispute, posted a sub-cent bond, and walked the full dispute reward out.
DeFiHackLabs reconstructs the sequence against the live Ethereum state; total loss is captured in the PoC.
What would have prevented it: a Solidity 0.8.x checked arithmetic on the bond calculation, since the overflow would have reverted.
Other exploits
- SynapLogic exploit analysis 20 Jan 2026
- MTToken exploit analysis 12 Jan 2026
- FutureSwap exploit analysis 10 Jan 2026
- PRXVT exploit analysis 1 Jan 2026
- Flare Network exploit analysis $8.5M
Query every incident yourself — free, no signup
Updated 14 Oct 2026. Figures are as reported by the sources listed above and are not independently verified.
The crypto data layer for humans, apps, and AI agents.
