Leaderboard
350All-time rank
C
ChainSwap
Nov 7, 2021
$4.4M
Lost
$4.4M
Recovered
$0
Net loss
$4.4M
Unrecovered0% recovered
ChainSwap bridge suffered an access control vulnerability in its cross-chain quota code. The attacker exploited a logical flaw that allowed invalid, non-whitelisted addresses to bypass authorization, take control of target projects' BSC contracts, and mint tokens directly to the attacker's address for sale.
- Target
- Bridge
- Classification
- Access Control
- Technique
- Caller Impersonation
- Attribution
- Unknown
- Chains
EthereumBSC
Event timeline
- Nov 7, 2021Exploit executed — $4.4M drained via caller impersonation
- Attributed to Unknown
- Recovery status Unrecovered 0%