Leaderboard
1005All-time rank
T
TrustPad
Nov 6, 2023
$155K
Lost
$155K
Recovered
$0
Net loss
$155K
Unrecovered0% recovered
sender, allowing an attacker to repeatedly call the function and harvest pending rewards by manipulating lock periods through untrusted external calls.
How the exploit worked
View reproducible PoCsender address verification.
Lost: ~$155K
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Access Control
- Technique
- Improper Access Control
- Attribution
- Unknown
- Chains
BSC
Event timeline
- Nov 6, 2023Exploit executed — $155K drained via improper access control
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)