Leaderboard
161All-time rank
SA
SUPERFORTUNE AI
May 27, 2026
$15.2M
Lost
$15.2M
Recovered
$0
Net loss
$15.2M
Unrecovered0% recovered
An attacker exploited insufficient verification controls in the multisig transaction process to redirect an airdrop transfer. A lookalike address was substituted for the GUA token claim contract, allowing the attacker to intercept the transfer.
- Target
- DeFi
- Classification
- Access Control
- Technique
- Improper Access Control
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- May 27, 2026Exploit executed — $15.2M drained via improper access control
- Attributed to Unknown
- Recovery status Unrecovered 0%