Crosswise Hack

Reported loss $879K
BNB Chain
Other

What happened

Crosswise Finance reported a series of exploits beginning on January 18, 2022. Contemporary reporting, citing PeckShield, put the protocol loss at about $879,000. The attacker used exposed privileged functionality to alter the MasterChef trusted-forwarder/owner control path, deployed a malicious strategy, withdrew 692,000 CRSS, swapped it for 547 WBNB, and moved funds through Tornado Cash.

How it happened

  1. The attacker used an exposed privileged function to set a trusted forwarder and compromise Crosswise MasterChef's owner control.
  2. They made the small router and MasterChef interactions needed to install an attacker-controlled strategy.
  3. The malicious strategy withdrew 692,000 CRSS from MasterChef.
  4. The CRSS was swapped for 547 WBNB and the proceeds were moved through Tornado Cash.

Protocol details

Classification Other / Access Control
Protocol Type Exploit/Other
Affected asset / contract CRSS
Implementation language Solidity
Protocol links Website @crosswisefi

Evidence

Understand the attack patterns

Compare incidents →
Access Control Attacks

Same attack technique

Browse all hacks →
BNB Chain Feminist Metaverse $540K lost BNB Chain Umbrella Network $700K lost Solana Solend $16K lost Ethereum Bancor $545K lost

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes