Leaderboard
569All-time rank
X
XBridge
Apr 24, 2024
$1.4M
Lost
$1.4M
Recovered
$0
Net loss
$1.4M
Unrecovered0% recovered
XBridge cross-chain bridge built by SaitaChain was exploited on April 24, 2024 on Ethereum and BNB Chain when unprotected listToken and withdrawTokens functions allowed attacker to register as token owner and drain bridge-held assets.
How the exploit worked
View reproducible PoCLogic Flaw.
Lost: >200k USD(plus a lot of STC, SRLTY, Mazi tokens)
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- Bridge
- Classification
- Access Control
- Technique
- Improper Access Control
- Attribution
- Unknown
- Chains
EthereumBSC
Event timeline
- Apr 24, 2024Exploit executed — $1.4M drained via improper access control
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)