Leaderboard
771All-time rank
SharedStake logo

SharedStake

Jun 24, 2021

$500K
Lost
$500K
Recovered
$0
Net loss
$500K
Unrecovered0% recovered

An insider with access to a disclosed timelock vulnerability exploited it to bypass vesting contract protections and withdraw 500K SGT governance tokens. The vulnerability had been identified on April 26 and shared with the team, but the insider used this knowledge to drain locked tokens four times on June 19-23.

Target
DeFi
Classification
Access Control
Technique
Improper Access Control
Attribution
Unknown
Chains
Ethereum

Event timeline

  1. Jun 24, 2021
    Exploit executed — $500K drained via improper access control
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents