Security Incident · Polygon Ecosystem
DoinGud Smart Contract Vulnerability: $35.49K Reported Loss
The dormant NFT platform DoinGud was exploited on Polygon via a bug in its Diamond bidding contract: acceptBid paid out but never cleared the bid record, so the same bid could be reused.
- Reported loss
- $ 35,486
- Attack category
- Smart Contract Vulnerability
Incident Overview
An attacker flash-loaned USDC equal to the contract balance, bid on themselves, accepted the bid twice, and drained about $35,486 USDC.e on September 21, 2026.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.