Digital Asset
Intelligence
Security Incident · Polygon Ecosystem

Cryptobottle Contract Vulnerability: $527.00K Reported Loss

·Historical incident record

Incident Overview

In October 2024, Cryptobottle on Polygon suffered three separate attacks, with total losses amounting to approximately $527,000. The attack on October 24 was the largest of the three, where the attacker exploited a critical vulnerability to disable the balance check in the swap() method after a callback. This allowed them to make arbitrary swaps to acquire a large amount of NAS tokens, which they then sold, resulting in a loss of around $490,000 for the project.

Sources & References

Original incident referencehttps://polygonscan.com/tx/0x115203d01c2e95d8c3585ec5c561bc7e40425f2a7c019abb1f3fc498cf451f90 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodContract Vulnerability
    Reported loss$ 85,700
  2. Incident date
    Target

    Polygon

    Attack methodAccount Compromise
    Reported lossNot disclosed
  3. Incident date
    Target

    PI (PI)

    Attack methodRug Pull
    Reported loss$ 490,000
  4. Incident date
    Attack methodPrice Manipulation
    Reported loss$ 1,000,000
  5. Incident date
    Attack methodContract Vulnerability
    Reported loss$ 93,000