Digital Asset
Intelligence
Security Incident

MAD Contract Vulnerability: $115.68K Reported Loss

·Historical incident record

Incident Overview

$MAD was hacked, and the hacker transferred all $MAD in the contract by directly calling the transfer function of the contract holding the token, and finally made a profit of $556 BNB (worth about $115,681), which was then transferred to Tornado.Cash. The reason is that the sensitive function was not checked in the contract that holding tokens, resulting in anyone can directly call the 0x9763a894 function to transfer out the tokens held in the contract.

Sources & References

Original incident referencehttps://twitter.com/BeosinAlert/status/1542517440252624896 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Quixotic

    Attack methodContract Vulnerability
    Reported loss220,000 OP
  2. Incident date
    Target

    Quint

    Attack methodContract Vulnerability
    Reported loss$ 130,000
  3. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 10,000
  4. Incident date
    Target

    $TENDRIL

    Attack methodSmart Contract Vulnerability
    Reported loss$ 555000
  5. Incident date
    Attack methodUnknown
    Reported lossNot disclosed