Real Access Control Hacks

Real incidents mapped to access control. Start with the records, open the source, then use the attack guide when an incident matches the code you are reviewing.

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
201 Third-party SquidRouterModule $3.2M — Access Control Attacks
202 SquidRouterModule $3.2M base, ethereum Access Control Attacks
203 GANA Payment $3.1M bsc Access Control Attacks
204 Cashaa $3.1M bitcoin Access Control Attacks
205 Fogo Foundation $3.0M fogo Access Control Attacks
206 BounceBit $3.0M bouncebit Access Control Attacks
207 Beets $3.0M — Access Control Attacks
208 GriffinAI $3.0M bsc Access Control Attacks
209 NFPrompt $3.0M ethereum Access Control Attacks
210 SUNRAY·FINANCE $2.9M arbitrum Access Control Attacks
211 Ribbon $2.7M ethereum Access Control Attacks
212 Hector Network $2.7M ethereum Access Control Attacks
213 OKX DEX $2.7M ethereum Access Control Attacks
214 Remitano $2.7M bitcoincash, ethereum, tron Access Control Attacks
215 Fetch.ai $2.6M multiple Access Control Attacks
216 Nemo Yield Trading $2.6M sui Access Control Attacks
217 Purse $2.5M — Access Control Attacks
218 Moby Trade $2.5M — Access Control Attacks
219 Atlantis Loans $2.5M bsc Access Control Attacks
220 Tessera DAO $2.4M bsc Access Control Attacks
221 CoinSpot $2.4M ethereum Access Control Attacks
222 OKX $2.4M — Access Control Attacks
223 TempleDAO $2.4M ethereum Access Control Attacks
224 BitPay $2.4M — Access Control Attacks
225 friesDAO $2.3M ethereum Access Control Attacks
226 Texture $2.2M solana Access Control Attacks
227 CoinStats $2.2M — Access Control Attacks
228 Pond0x $2.2M ethereum Access Control Attacks
229 NEKO $2.2M bsc Access Control Attacks
230 Gatecoin $2.1M — Access Control Attacks
231 Mozaic $2.1M arbitrum Access Control Attacks
232 Unizen $2.1M ethereum Access Control Attacks
233 Gym Network $2.1M bsc Access Control Attacks
234 stazie $2.1M — Access Control Attacks
235 Dexible $2.0M arbitrum, ethereum Access Control Attacks
236 Polygon $2.0M polygon Access Control Attacks
237 Rari Capital $2.0M ethereum Access Control Attacks
238 OlaXBT $2.0M bsc Access Control Attacks
239 MEV Bots $2.0M — Access Control Attacks
240 $2M Coin Poker $2.0M — Access Control Attacks
241 pump.fun $2.0M solana Access Control Attacks
242 Curve Finance MEV Bot $2.0M ethereum Access Control Attacks
243 Hope Finance $2.0M arbitrum Access Control Attacks
244 Mirror Protocol $2.0M terra Access Control Attacks
245 OpenSea $2.0M ethereum Access Control Attacks
246 Circle $2.0M — Access Control Attacks
247 Gatecoin $2.0M ethereum Access Control Attacks
248 MintPal $2.0M bitcoin Access Control Attacks
249 Dough Finance $2.0M ethereum Access Control Attacks
250 Coinis $1.9M — Access Control Attacks
251 XBridge $1.9M bsc, ethereum Access Control Attacks
252 Dolomite $1.9M ethereum Access Control Attacks
253 FEG Token $1.9M bsc, ethereum Access Control Attacks
254 CF Token $1.9M bsc Access Control Attacks
255 Transit Finance $1.9M tron Access Control Attacks
256 Concentric $1.9M arbitrum Access Control Attacks
257 Payy Network $1.8M ethereum Access Control Attacks
258 MERLIN DEX $1.8M zksync era Access Control Attacks
259 Limit Break Payment Processor $1.8M apechain, base, ethereum, polygon Access Control Attacks
260 Nexera $1.8M ethereum Access Control Attacks
261 PancakeSwap $1.8M bsc Access Control Attacks
262 Ledger $1.8M — Access Control Attacks
263 CoinTiger $1.8M — Access Control Attacks
264 BTER $1.8M bitcoin Access Control Attacks
265 Bent Finance $1.8M ethereum Access Control Attacks
266 8ightDAO $1.8M harmony Access Control Attacks
267 Gate.io $1.8M — Access Control Attacks
268 DePo $1.7M — Access Control Attacks
269 Abracadabra Spell $1.7M ethereum Access Control Attacks
270 XT Exchange $1.7M ethereum Access Control Attacks
271 Grand Base $1.7M base Access Control Attacks
272 Reaper Farm $1.7M fantom Access Control Attacks
273 BSC TMM/USDT $1.7M bsc Access Control Attacks
274 BTER $1.6M bitcoin Access Control Attacks
275 Pike V1 $1.6M arbitrum, ethereum, optimism Access Control Attacks
276 Flooring Protocol $1.6M ethereum Access Control Attacks
277 LianGo Protocol $1.6M — Access Control Attacks
278 Token of Power $1.6M ethereum Access Control Attacks
279 Taylor $1.6M — Access Control Attacks
280 Kinto Bridge $1.6M arbitrum Access Control Attacks
281 Fetch.ai $1.5M ethereum Access Control Attacks
282 Purrlend $1.5M hyperliquid l1, megaeth Access Control Attacks
283 OneRing $1.5M ethereum Access Control Attacks
284 ASI Alliance & SingularityNET $1.5M — Access Control Attacks
285 YOLO Games $1.5M blast Access Control Attacks
286 UvToken $1.5M bsc Access Control Attacks
287 Levyathan $1.5M binance, bsc Access Control Attacks
288 MintPal $1.5M — Access Control Attacks
289 Moby $1.5M arbitrum Access Control Attacks
290 Universe Token $1.4M — Access Control Attacks
291 Rubic $1.4M ethereum Access Control Attacks
292 Ekubo Protocol $1.4M ethereum Access Control Attacks
293 Wilder $1.8M — Access Control Attacks
294 EtherDelta $1.4M ethereum Access Control Attacks
295 Giddy $1.3M ethereum Access Control Attacks
296 LND $1.3M hyperliquid l1, sonic Access Control Attacks
297 Bitcoin Mission $1.3M arbitrum Access Control Attacks
298 Monoswap $1.3M blast Access Control Attacks
299 MonoSwap $1.3M — Access Control Attacks
300 Samudai $1.3M ethereum Access Control Attacks

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.