Leaderboard
1360All-time rank
MZ

MBC & ZZSH

Nov 29, 2022

$6K
Lost
$6K
Recovered
$0
Net loss
$6K
Unrecovered0% recovered

MBC and ZZSH tokens on BSC suffered access control vulnerabilities combined with business logic flaws. Attackers exploited improper permission checks to drain protocol funds.

How the exploit worked

View reproducible PoC

Business Logic Flaw & Access Control.

Source: DeFiHackLabs (SunWeb3Sec)

Target
DeFi
Classification
Access Control
Technique
Improper Access Control
Attribution
Unknown
Chains
BSC

Event timeline

  1. Nov 29, 2022
    Exploit executed — $6K drained via improper access control
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents