How much was stolen in the Exactly hack?

DeFiLlama reports $7.2M stolen from Exactly on optimism.

Who was hit in the Exactly hack?

Exactly, on optimism, on August 18, 2023. Attack type: contract exploit.

Where did the Exactly funds go?

ChainHint traced $6.61K sent out by the traced address, and followed it to 1 endpoint.

Recent hacks/Exactly

Exactly Hack:$7.2M Stolen

August 18, 2023 · Optimism

Reported loss$7.2Msource: DeFiLlama

Traced by ChainHint$6.61K(0.1% of reported)from 0x3747dbbcb5c07786a4c59883e473a2e38f571af9

Reported by DeFiLlama

As of 2026-11-08 14:18 UTC. These are the feed's figures, not ChainHint's. A freshly reported incident is an unverified third-party claim and the numbers move.

Estimated Loss$7.2M

ChainOptimism

DateAugust 18, 2023

Attack typeContract exploit

Attacker address

Verified by ChainHint · 2026-11-08

0x3747dbbcb5c07786a4c59883e473a2e38f571af9

On-chain check: Optimism, Blockscout txlist + Alchemy getAssetTransfers, read 2026-11-08: 0x3747…1af9 was funded with 4 ETH by 0xe4f34a72…a042 at 2023-08-18 05:55:59 UTC (tx 0xe0d8116a…c234), then sent the three attack calls (selector 0xa5a1da05) to the attack contract 0x6dd61c69415c8ecab3fefd80d079435ead1a5b4d at 09:11:33, 09:11:35 and 09:11:39 UTC — the first is 0x3d6367de5c191204b44b8a5cf975f257472087a9aadc59b5d744ffdef33a520e, Rekt's 'Example attack tx' — and returned 3.928 ETH to 0xe4f34a72…a042 at 09:39:31 (tx 0xf8c08553…380f).

Exploit transaction: 0x3d6367de…f33a520e

Sources: rekt.news

Rekt names three exploiter addresses: 1 = this one (it sent the attack transactions), 2 = 0xe4f34a72d7c18b6f666d6ca53fbc3790bc9da042 (funded it, received its ETH back), 3 = 0x417179df13ba3ed138b0a58eaa0c3813430a20e0. The ~4,324 ETH of proceeds did not sit at this address, so a graph rooted here would show only the funding round-trip; no re-trace is part of this batch.

Traced by ChainHint — Traced Outflow

$6.61Ksent out by the traced address · followed to 1 endpoint

2 nodes · 1 edges

In ChainHint's incident archive

No earlier incident at Exactly is recorded in our archive.

Contract exploit — 16 incidents of this kind in the 90 days before this page was built, $264M in total, among the incidents ChainHint lists.

Exactly hack: the facts

How much was stolen in the Exactly hack?: DeFiLlama reports $7.2M stolen from Exactly on optimism.
Who was hit in the Exactly hack?: Exactly, on optimism, on August 18, 2023. Attack type: contract exploit.
Where did the Exactly funds go?: ChainHint traced $6.61K sent out by the traced address, and followed it to 1 endpoint.

Related hacks

All hacks →

Investigate your own incident

Trace the path of funds across 12 chains on public blockchain data.