Leaderboard
488All-time rank
MM Finance Cronos logo

MM Finance Cronos

May 4, 2022

$2.0M
Lost
$2.0M
Recovered
$0
Net loss
$2.0M
Unrecovered0% recovered

Finance's DNS infrastructure was compromised, allowing attackers to inject a malicious contract address. Users interacting with swap, add liquidity, or remove liquidity functions had their funds siphoned to the attacker's wallet.

Approximately $2M in CRO was stolen and laundered through Tornado Cash to OKX.

Target
DeFi
Classification
Frontend & Infrastructure
Technique
DNS Hijack
Attribution
Unknown
Chains
Cronos

Event timeline

  1. May 4, 2022
    Exploit executed — $2.0M drained via dns hijack
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents