Leaderboard
1139All-time rank
B
Biswap
Jun 30, 2023
$72K
Lost
$72K
Recovered
$0
Net loss
$72K
Unrecovered0% recovered
Biswap's V3 Migrator contract lacked proper access control and parameter validation when migrating liquidity from V2 to V3. An attacker exploited this to call the migrator contract and steal funds from liquidity providers who had authorized their LP tokens.
How the exploit worked
View reproducible PoCV3Migrator Exploit.
Lost: ~$72k
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Access Control
- Technique
- Improper Access Control
- Attribution
- Unknown
- Chains
BNB Chain
Event timeline
- Jun 30, 2023Exploit executed — $72K drained via improper access control
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)