QAN Platform Hack

Reported loss $1.2M
Ethereum
Access Control

What happened

QAN Platform Bridge was hacked due to a private key compromise. The hacker gained access to the private key of the bridge deployer address and withdrew $QANX tokens from the bridge contract on both Ethereum and BSC chains.

QAN Platform is the bridge between Ethereum and BSC chains. The hacker compromised the private keys of the bridge contract deployer and withdrew 1,444,000,000 $QANX tokens from the BSC chain and 1,459,000,000 $QANX tokens from the Ethereum chain. Consequently, the attacker swapped $QANX tokens which led to a drop in the token price by more than 99%.

The hacker managed to withdraw 1,165,500 $USD worth of assets through TornadoCash.

Attacker addresses:

Address 0xf163…fb11

Address 0xf163…fb11

Malicious transactions:

Tx 0xf930…3f51

Tx 0x048a…fe82

Tx 0x39ec…080f

Protocol details

Classification Bridge / Key Compromise
Protocol Type Exploit/Access control
Affected asset / contract QANX
Implementation language Solidity
Protocol links Website @QANplatform

Understand the attack patterns

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.