Leaderboard
514All-time rank
CT
CF Token
Apr 11, 2022
$1.9M
Lost
$1.9M
Recovered
$0
Net loss
$1.9M
Unrecovered0% recovered
CF token contract exposed a public _transfer function with an unvalidated 'from' address parameter, allowing arbitrary transfers from any holder. 2M CF tokens, converting them to 4,200+ BNB and cashing out via Tornado Cash.
- Target
- DeFi
- Classification
- Access Control
- Technique
- Improper Access Control
- Attribution
- Unknown
- Chains
BSC
Event timeline
- Apr 11, 2022Exploit executed — $1.9M drained via improper access control
- Attributed to Unknown
- Recovery status Unrecovered 0%