Leaderboard
707All-time rank
L
LaunchZone
Feb 27, 2023
$700K
Lost
$700K
Recovered
$0
Net loss
$700K
Unrecovered0% recovered
On February 27, 2023, LaunchZone on BSC suffered a $700,000 exploit via missing access control on the transferFrom() function in the Bscex SwapX contract. The attacker manipulated LZ token prices and executed arbitrary token transfers from liquidity pools.
How the exploit worked
View reproducible PoCAccess Control.
Lost: ~$320,000
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Access Control
- Technique
- Improper Access Control
- Attribution
- Unknown
- Chains
BSC
Event timeline
- Feb 27, 2023Exploit executed — $700K drained via improper access control
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)