Real Access Control Hacks

Real incidents mapped to access control. Start with the records, open the source, then use the attack guide when an incident matches the code you are reviewing.

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
401 Tales of Elleria $280K arbitrum Access Control Attacks
402 796 Exchange $270K bitcoin Access Control Attacks
403 Zerobase $250K bsc Access Control Attacks
404 Hacken Token $250K — Access Control Attacks
405 Spectral Labs $250K ethereum Access Control Attacks
406 ULME Token $250K bsc Access Control Attacks
407 Bitomat $236K — Access Control Attacks
408 Gondi $230K ethereum Access Control Attacks
409 Shapeshift $230K bitcoin Access Control Attacks
410 Ledger $224K — Access Control Attacks
411 Fluid Lending $215K ethereum Access Control Attacks
412 Renegade $209K arbitrum Access Control Attacks
413 Rare Bears $206K — Access Control Attacks
414 Bitmit $202K — Access Control Attacks
415 Keep3r Network $200K ethereum Access Control Attacks
416 SNOOKER $198K bsc Access Control Attacks
417 Rabby Wallet $194K — Access Control Attacks
418 Holdstation $192K — Access Control Attacks
419 FENGSHOU Token $191K bsc Access Control Attacks
420 Layer2DAO $190K optimism Access Control Attacks
421 MetaDragonDao $181K bsc Access Control Attacks
422 Civilization $180K ethereum Access Control Attacks
423 CoW Swap $180K ethereum Access Control Attacks
424 Bill Muray Wallet Hack $178K — Access Control Attacks
425 Stake DAO $176K arbitrum, base Access Control Attacks
426 SharedStake $175K ethereum Access Control Attacks
427 DoodiPals $171K solana Access Control Attacks
428 ZigGap $169K — Access Control Attacks
429 PicoStocks $167K — Access Control Attacks
430 Stobox Exchange $166K — Access Control Attacks
431 MAID $166K — Access Control Attacks
432 Enjin $162K ethereum Access Control Attacks
433 DappNode $158K — Access Control Attacks
434 TrustPad $155K bsc Access Control Attacks
435 DBXen $150K ethereum Access Control Attacks
436 MyEtherWallet $150K — Access Control Attacks
437 SynapLogic $144K base Access Control Attacks
438 Ink Finance $140K polygon Access Control Attacks
439 Ratz Club $140K — Access Control Attacks
440 Quant $138K ethereum Access Control Attacks
441 SubQuery Network $134K base Access Control Attacks
442 ShapeShift FOX Colony $133K arbitrum Access Control Attacks
443 Perpy $132K arbitrum Access Control Attacks
444 Dexmax AI $130K ethereum Access Control Attacks
445 MSCST $130K bsc Access Control Attacks
446 Molt EVM $127K base Access Control Attacks
447 Ara Finance $125K bsc Access Control Attacks
448 Biki $123K — Access Control Attacks
449 Just-Dice $123K — Access Control Attacks
450 Swarm Markets $120K ethereum Access Control Attacks
451 Twitter $120K — Access Control Attacks
452 YON $118K bsc Access Control Attacks
453 Local Traders $118K bsc Access Control Attacks
454 Cdecker $113K — Access Control Attacks
455 WXETA $110K bsc, ethereum Access Control Attacks
456 Mars Meta Space $102K — Access Control Attacks
457 Huma Finance V2 $101K polygon Access Control Attacks
458 OPSEC $100K ethereum Access Control Attacks
459 Coinbase $100K — Access Control Attacks
460 Bitcash.cz $100K bitcoin Access Control Attacks
461 ONTR $98K ethereum Access Control Attacks
462 CityDAO $95K ethereum Access Control Attacks
463 Citizen Finance $94K bsc, polygon Access Control Attacks
464 Citadel Finance $93K arbitrum Access Control Attacks
465 Stake DAO $91K arbitrum Access Control Attacks
466 Berally $90K berachain Access Control Attacks
467 Melo $90K bsc Access Control Attacks
468 Brahma Finance $89K ethereum Access Control Attacks
469 CheckoutPool $86K polygon Access Control Attacks
470 BTC24H $86K polygon Access Control Attacks
471 four.meme $80K bsc Access Control Attacks
472 Pirate x Pirate $78K bsc Access Control Attacks
473 WebKeyDao $73K bsc Access Control Attacks
474 Spectra Finance $73K ethereum Access Control Attacks
475 BiSwap $72K bsc Access Control Attacks
476 Karastar $69K — Access Control Attacks
477 Wise Lending V2 $66K arbitrum, ethereum Access Control Attacks
478 MainnetSettler $66K ethereum Access Control Attacks
479 Saga DAO $66K solana Access Control Attacks
480 Thoreum Finance $66K bsc Access Control Attacks
481 Hackerdao $65K bsc Access Control Attacks
482 Custom sAVAX Rebalancer $64K avalanche Access Control Attacks
483 Fantom $62K — Access Control Attacks
484 CoW $59K ethereum Access Control Attacks
485 dTRINITY $56K sonic Access Control Attacks
486 Aave $56K ethereum Access Control Attacks
487 Eden Network $54K — Access Control Attacks
488 Crypto DAO $52K bsc Access Control Attacks
489 Bit LC Inc. $51K — Access Control Attacks
490 Revert Lend $50K base Access Control Attacks
491 Bonfire $47K bsc Access Control Attacks
492 Cryptopia Exchange $45K multiple Access Control Attacks
493 Ragnarok Online Invasion $44K bsc Access Control Attacks
494 ether.fi Liquid $43K ethereum Access Control Attacks
495 V4 Swap Router by z0r0z $42K — Access Control Attacks
496 Asterix $40K ethereum Access Control Attacks
497 DIMO $40K ethereum Access Control Attacks
498 LiveArtX $39K ethereum Access Control Attacks
499 AIRWA $34K bsc Access Control Attacks
500 AK1111 $32K bsc Access Control Attacks

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.