Leaderboard
672All-time rank
M
MetaPoint
Apr 12, 2023
$820K
Lost
$820K
Recovered
$0
Net loss
$820K
Unrecovered0% recovered
MetaPoint was exploited through a public approval function that allowed attackers to transfer all user assets. The attacker created bulk contracts to invoke the unrestricted approve function and drain maximum token amounts from user deposits.
How the exploit worked
View reproducible PoCUnrestricted Approval.
Lost: $820k(2500BNB)
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Access Control
- Technique
- Token Approval Abuse
- Attribution
- Unknown
- Chains
BSC
Event timeline
- Apr 12, 2023Exploit executed — $820K drained via token approval abuse
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)