Leaderboard
436All-time rank
HN
Hector Network
Jan 16, 2024
$2.7M
Lost
$2.7M
Recovered
$0
Net loss
$2.7M
Unrecovered0% recovered
7M worth of assets to itself. The vulnerable AddEligibleWallet function allowed the attacker to designate arbitrary addresses as eligible and drain the treasury via mintWithdraw and transferRedemption functions.
- Target
- DeFi
- Classification
- Access Control
- Technique
- Improper Access Control
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Jan 16, 2024Exploit executed — $2.7M drained via improper access control
- Attributed to Unknown
- Recovery status Unrecovered 0%