Digital Asset
Intelligence
Security Incident

Bonfiretoken Smart Contract Vulnerability: $50.00K Reported Loss

·Historical incident record

Incident Overview

The BonfireSwap router’s transfer lacked access control: it did not require msg.sender == from or check the caller’s allowance on from. An attacker set approved holders as from and themselves as to, drained TOKEN via existing victim→router allowances, then forwarded funds through a same-token pool swap. About 41 approved holders were hit; loss ~$50,000.

Sources & References

Original incident referencehttps://x.com/SlowMist_Team/status/2100064586980528458 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Nostra

    Attack methodOracle Manipulation
    Reported loss$ 3,500,000
  2. Incident date
    Attack methodFlash Loan Price Manipulation
    Reported loss$ 345,900
  3. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 10,000
  4. Incident date
    Target

    $TENDRIL

    Attack methodSmart Contract Vulnerability
    Reported loss$ 555000
  5. Incident date
    Attack methodUnknown
    Reported lossNot disclosed