Citizen Finance Hack

REPORTED LOSS $94K
Low Access Control bsc polygon

What happened

The Citizen Finance platform suffered from an attack by a hacker who managed to obtain the private key of one of the Citizen Finance wallets and proceeded to steal $94k.

Citizen Finance is a platform where players are the true owners of their in-game assets. Players can stake, resell, gift them or use assets as a collateral.

Citizen Finance was attacked by a hacker who obtained a private key with access to the BSC and Polygon chains. The attacker used their access to transfer 244 $BNB, 57k $MATIC and 7k $USDC that attacker withdrew in these transactions:

  1. Tx
  2. Tx

The theft caused a price drop of the $CIFI token by more than 50%.

As the time of this writing information on this case is scarce. More sources will be added if the case should develop.

Account addresses where stolen funds are currently located:

(BSC) https://bscscan.com/address/0xac3dc7bb…f6ac2b

(Polygon) https://polygonscan.com/address/0xac3dc7bb…f6ac2b

Case & protocol details

Classification Gaming / Metaverse / Key Compromise
Protocol Type Exploit/Access control
Affected asset / contract CIFI
Implementation language Solidity
Official Website www.citizenfinance.io/
Protocol Twitter/X @citizen_finance

Evidence & learning

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.