Leaderboard
854All-time rank
GF
Galaxy Fox
May 10, 2024
$330K
Lost
$330K
Recovered
$0
Net loss
$330K
Unrecovered0% recovered
Galaxy Fox token's setMerkleRoot function was publicly accessible without access control, allowing attackers to manipulate the merkle root and falsely claim 108 ETH from the contract's funds.
- Target
- DeFi
- Classification
- Access Control
- Technique
- Improper Access Control
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- May 10, 2024Exploit executed — $330K drained via improper access control
- Attributed to Unknown
- Recovery status Unrecovered 0%
