Leaderboard
854All-time rank
GF

Galaxy Fox

May 10, 2024

$330K
Lost
$330K
Recovered
$0
Net loss
$330K
Unrecovered0% recovered

Galaxy Fox token's setMerkleRoot function was publicly accessible without access control, allowing attackers to manipulate the merkle root and falsely claim 108 ETH from the contract's funds.

Target
DeFi
Classification
Access Control
Technique
Improper Access Control
Attribution
Unknown
Chains
Ethereum

Event timeline

  1. May 10, 2024
    Exploit executed — $330K drained via improper access control
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents