Skip to content
RetoSwap Monero DEX Hack Results in $2.7 Million Theft

RetoSwap Monero DEX Hack Results in $2.7 Million Theft

First seen 22 May 2026, 19:09 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •May 23, 2026 at 19:06 UTC
  • •7,000 XMR, worth $2.7 million, was stolen from RetoSwap due to a smart contract vulnerability.
  • •The attacker has not attempted to launder the stolen funds through known mixing services.
  • •The incident has prompted concerns about security in the Monero DeFi ecosystem and calls for improved audits.

RetoSwap, a decentralized exchange on the Monero blockchain, was exploited, leading to the theft of approximately 7,000 XMR, valued at around $2.7 million. The breach was first identified by PeckShield, which reported a vulnerability in RetoSwap's smart contract infrastructure. The specific method of attack has not been disclosed, but it could involve flash loans or price oracle manipulation. The stolen funds have been transferred to a separate wallet, with no laundering activity detected through known mixers. This incident has caused a minor dip in XMR's price by about 1.5%, raising concerns within the Monero community about the security of DeFi platforms. RetoSwap has not yet issued a post-mortem or announced any plans for user reimbursement, leaving affected users uncertain about their funds. The incident reflects ongoing security challenges in decentralized finance, especially for smaller exchanges.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 155d ago How this analysis works

Timeline

2026-05-21
RetoSwap hack reported
PeckShield flagged a vulnerability in RetoSwap's smart contract, leading to the theft of 7,000 XMR.
Cryptorank
2026-05-21
Funds moved to separate wallet
The stolen funds were transferred to a different wallet, with no laundering detected yet.
Cryptonews
2026-05-21
XMR price dip observed
Following the news of the hack, XMR's price dropped by approximately 1.5%.
Cryptorank

More articles in this cluster (3)

Following this threat?

Track RetoSwap in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed