Genius Token Hack
Incident Overview
The Genius token team executed a partial exit scam on May 5th, 2024, making a profit of approximately $1.2 million USD.
The original GNUS Token deployer 0x1804dE was funded on the Fantom chain by another scam wallet 0x548c63 initiated a function deployTokenManager on the InterchainProxy contract which is one of the core Axelar Network contracts. This function deployed a new token manager with a fake token 0xC77522 registered as a bridged token.
Simultaneously, another address, 0x548c63, deployed and minted 100,000,000 fake tokens, 0xC77522, on the Fantom network.
Subsequently, 500,000 of the fake tokens were bridged via Axelar to the Ethereum network and sold on the Uniswap DEX for 407 ETH.
The profits were then mixed and sent to various addresses.
GNUS Token Deployer:
https://etherscan.io/address/0x1804deca…a8b463
Fake token manager:
https://ftmscan.com/address/0x8c10c286…b575C6#code
Fantom fake token:
https://ftmscan.com/address/0xC77522dC…027d17
Bridging to Ethereum mainnet:
https://ftmscan.com/tx/0x9fe599bf…c12ec6
Ethereum mainnet sell:
https://etherscan.io/tx/0xe8a5780c…85a407
Two scammer addresses are linked to the transaction: https://ftmscan.com/tx/0xae046acc…1c9ac9
Incident Report
Protocol Information
Market Context at Time of Hack
What the Attacker Needed to Succeed
Understanding the prerequisites for this type of attack helps auditors identify protocols that are most at risk and helps developers build better defenses.
What Auditors Should Check
If you're auditing a protocol with similar architecture to Genius Token, these are the critical security checks that could have prevented this incident (May 2024).
- Verify all logic paths related to Other are guarded by proper access controls and input validation
- Review privileged functions (owner, admin, governance) for potential abuse vectors - centralization risks should be documented and bounded with timelocks or multi-sigs
Master these auditing techniques with hands-on labs and real exploit scenarios in the Smart Contract Hacking course.
Free TrialSources & References
Learn to Prevent the Next Genius Token
The Genius Token hack is one of many attacks that skilled auditors are trained to detect before deployment. Master real exploit patterns and defense techniques with hands-on Web3 security training.