What happened
A BEAM holder using kirilm.eth lost about 180.25 million BEAM, valued near $5.14 million at the time, after authorizing a malicious token allowance. Reporting describes a wallet phishing incident, not a vulnerability in BEAM's protocol or token contract.
Malicious ERC-20 allowance authorization (phishing); no BEAM protocol vulnerability was reported.
Case & protocol details
Attack Timeline
The victim authorized an ERC-20 allowance that enabled an attacker to transfer the BEAM tokens. Reporting says the 180.25 million BEAM was later liquidated for about 1,629 ETH, which coincided with a BEAM price decline. The public evidence does not identify the exact lure or establish an attacker identity, and it does not support a claim of fund recovery.
This page treats the event as an allowance-phishing loss rather than presenting it as an exploit that auditors could have fixed in BEAM's smart contracts.
Evidence & learning
Attack pattern
Compare incidents →Sources and on-chain records
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.