Leaderboard
794All-time rank
Rigoblock
Feb 18, 2022
$464K
Lost
$464K
Recovered
$0
Net loss
$464K
Unrecovered0% recovered
RigoBlock's Dragos contracts lacked the onlyOwner modifier on the setMultipleAllowances function, allowing attackers to modify token allowances without authorization. 86 ETH from the protocol's liquidity pools.
The attacker later returned 90% of funds, retaining 10% as a bounty.
- Target
- DeFi
- Classification
- Access Control
- Technique
- Improper Access Control
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Feb 18, 2022Exploit executed — $464K drained via improper access control
- Attributed to Unknown
- Recovery status Unrecovered 0%