Leaderboard
661All-time rank
C
Crosswise
Jan 18, 2022
$879K
Lost
$879K
Recovered
$0
Net loss
$879K
Unrecovered0% recovered
Crosswise's MasterChef contract had public exposure of privileged functions, allowing an attacker to gain unauthorized access. The hacker exploited this to set a trusted forwarder, compromise owner privileges, and withdraw 692K CRSS tokens.
After swapping to WBNB, the attacker laundered 547 WBNB through Tornado Cash.
- Target
- DeFi
- Classification
- Access Control
- Technique
- Improper Access Control
- Attribution
- Unknown
- Chains
BSC
Event timeline
- Jan 18, 2022Exploit executed — $879K drained via improper access control
- Attributed to Unknown
- Recovery status Unrecovered 0%