Leaderboard
1313All-time rank
AUR Protocol
Nov 22, 2022
$13K
Lost
$13K
Recovered
$0
Net loss
$13K
Unrecovered0% recovered
AUR token on BSC lacked proper permission checks in critical functions. The missing access control allowed attackers to call privileged functions and drain token assets.
How the exploit worked
View reproducible PoCLack of Permission Check.
Lost: $13k
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Access Control
- Technique
- Improper Access Control
- Attribution
- Unknown
- Chains
BSC
Event timeline
- Nov 22, 2022Exploit executed — $13K drained via improper access control
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)