Leaderboard
896All-time rank
7

796

Jan 27, 2015

$270K
Lost
$270K
Recovered
$0
Net loss
$270K
Unrecovered0% recovered

The 796 exchange suffered from a vulnerability in its withdrawal system that allowed attackers to modify withdrawal addresses. A hacker exploited this by submitting a withdrawal with a modified address that the exchange staff failed to notice, routing 1,000 BTC to the attacker instead of the legitimate customer.

Target
CEX
Classification
Access Control
Technique
Improper Access Control
Attribution
Unknown
Chains
Bitcoin

Event timeline

  1. Jan 27, 2015
    Exploit executed — $270K drained via improper access control
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents