What happened
A BEAM holder using kirilm.eth lost about 180.25 million BEAM, valued near $5.14 million at the time, after authorizing a malicious token allowance. Reporting describes a wallet phishing incident, not a vulnerability in BEAM's protocol or token contract.
Malicious ERC-20 allowance authorization (phishing); no BEAM protocol vulnerability was reported.
How it happened
The victim authorized an ERC-20 allowance that enabled an attacker to transfer the BEAM tokens. Reporting says the 180.25 million BEAM was later liquidated for about 1,629 ETH, which coincided with a BEAM price decline. The public evidence does not identify the exact lure or establish an attacker identity, and it does not support a claim of fund recovery.
This page treats the event as an allowance-phishing loss rather than presenting it as an exploit that auditors could have fixed in BEAM's smart contracts.
Protocol details
Evidence
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
