Magpie Protocol 2024 MagpieRouterV2 exploit

Timeline events

• MagpieRouterV2 exploit occurred2024-04-23

  An attacker exploited selector-position validation in MagpieRouterV2 and drained approved assets from 221 wallets.

  Exploit OccurredHigh

  The incident affected Magpie's router and approved user assets, not Wormhole's bridge reserves.

• Magpie dApp paused during incident response2024-04-23

  Magpie paused and shut down the dApp to stop additional losses while the vulnerable routing path was fixed.

  Bridge PausedHigh

• All affected Magpie users reimbursed in full2024-04-26

  Magpie reported that every affected wallet had been reimbursed with the original asset on the chain where the loss occurred.

  Reimbursement CompletedHigh

  This is reimbursement, not attacker return or recovered stolen funds.

• Magpie published router-vulnerability postmortem2024-04-26

  The first-party postmortem described the selector-position flaw, temporary mitigation, permanent fix, reimbursement, and planned audit and monitoring work.

  Postmortem PublishedHigh

• Magpie returned to operation after remediation2024-05

  A May 2024 first-party follow-up described the vulnerability as fixed, users as fully refunded within two weeks, and the protocol as safe to use while additional audits and monitoring integrations continued.

  Bridge ReopenedMedium

  Month precision is used because a dedicated exact-date relaunch notice was not located.

Evidence records

• Magpie Protocol Smart Contract Vulnerability Post Mortem
  Magpie Protocol · Tier 1 · High reliability · primary · 2024-04-26
  Claim scope: Incident Case

  Primary source for root cause, USD 129,000 amount, 221 wallets, fix, pause, and full reimbursement.

• Magpie Protocol Charting A Secure Path Following Exploit
  Magpie Protocol · Tier 1 · High reliability · primary · 2024-05-21
  Claim scope: Restart

  Follow-up confirming full refunds within two weeks and continued security work.

• Magpie Protocol Smart Contract Vulnerability Post Mortem
  Magpie Protocol · Tier 1 · High reliability · primary · 2024-04-26
  Claim scope: Incident Case

  Event-scoped duplicate supporting the MagpieRouterV2 exploit, affected wallets, and amount.

• Magpie Protocol Smart Contract Vulnerability Post Mortem
  Magpie Protocol · Tier 1 · High reliability · primary · 2024-04-26
  Claim scope: Shutdown

  Event-scoped duplicate supporting the Magpie dApp pause during containment.

• Magpie Protocol Charting A Secure Path Following Exploit
  Magpie Protocol · Tier 1 · High reliability · primary · 2024-05-21
  Claim scope: Shutdown

  Event-scoped duplicate independently supporting the incident-response shutdown before relaunch.

• Magpie Protocol Smart Contract Vulnerability Post Mortem
  Magpie Protocol · Tier 1 · High reliability · primary · 2024-04-26
  Claim scope: Reimbursement

  Event-scoped duplicate supporting full reimbursement with original assets.

• Magpie Protocol Charting A Secure Path Following Exploit
  Magpie Protocol · Tier 1 · High reliability · primary · 2024-05-21
  Claim scope: Reimbursement

  Event-scoped duplicate independently confirming completion of full refunds.

Source tiers describe evidence authority, not certainty for every claim. Tier 1 is the strongest source class; Tier 2 and Tier 3 provide progressively more secondary or supporting context. Source notes define what each record actually supports.