Leaderboard
480All-time rank
P
Polygon
Dec 3, 2021
$2.0M
Lost
$2.0M
Recovered
$0
Net loss
$2.0M
Unrecovered0% recovered
White-hat hackers discovered a critical vulnerability in Polygon's PoS genesis contract MRC20 token where the transfer function lacked balance/allowance checks. 3 billion MATIC tokens.
Before the fix was deployed, threat actor stole 801,601 MATIC tokens. 2M bug bounty for the disclosure.
- Target
- DeFi
- Classification
- Access Control
- Technique
- Improper Access Control
- Attribution
- Unknown
- Chains
Polygon
Event timeline
- Dec 3, 2021Exploit executed — $2.0M drained via improper access control
- Attributed to Unknown
- Recovery status Unrecovered 0%