Leaderboard
508All-time rank
FT

FEG Token

May 17, 2022

$1.9M
Lost
$1.9M
Recovered
$0
Net loss
$1.9M
Unrecovered0% recovered

FEG's swapToSwap() function lacked input validation on the 'path' parameter, allowing attackers via flashloan to gain unlimited allowance and drain contract assets. 9M total across ETH and BSC networks.

Target
DeFi
Classification
Access Control
Technique
Improper Access Control
Attribution
Unknown
Chains
Binance Smart ChainEthereum

Event timeline

  1. May 17, 2022
    Exploit executed — $1.9M drained via improper access control
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents