Leaderboard
677All-time rank
C

ChainSwap

Jul 2, 2021

$800K
Lost
$800K
Recovered
$0
Net loss
$800K
Unrecovered0% recovered

On July 2, 2021, ChainSwap, an Ethereum-BSC bridge protocol, was exploited via a bridge logic flaw where attackers bypassed signature verification by exploiting incorrect authQuotaOf implementation, allowing them to mint tokens across multiple protocols using the bridge and steal approximately $800K.

How the exploit worked

View reproducible PoC

Bridge, logic flaw.

Lost: $.8 million

Source: DeFiHackLabs (SunWeb3Sec)

Target
Bridge
Classification
Bridge & Cross-Chain
Technique
Bridge Logic Flaw
Attribution
Unknown
Chains
EthereumBinance Smart Chain

Event timeline

  1. Jul 2, 2021
    Exploit executed — $800K drained via bridge logic flaw
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents