Leaderboard
1101All-time rank
C
Citadel.one
Jan 27, 2024
$93K
Lost
$93K
Recovered
$0
Net loss
$93K
Unrecovered0% recovered
one, a portfolio management dApp on Arbitrum, suffered an access control vulnerability that allowed unauthorized extraction of wrapped Ethereum (WETH) and USD Coin (USDC). The attackers exploited improper access controls in the smart contract to drain approximately $93,000 in user funds.
- Target
- DeFi
- Classification
- Access Control
- Technique
- Improper Access Control
- Attribution
- Unknown
- Chains
Arbitrum
Event timeline
- Jan 27, 2024Exploit executed — $93K drained via improper access control
- Attributed to Unknown
- Recovery status Unrecovered 0%