Real Access Control Hacks

Real incidents mapped to access control. Start with the records, open the source, then use the attack guide when an incident matches the code you are reviewing.

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
401 SQ Protocol $346K bsc Access Control Attacks
402 Vircurex $342K — Access Control Attacks
403 Fusion by IPOR $336K arbitrum Access Control Attacks
404 IPOR Fusion $336K arbitrum Access Control Attacks
405 ZetaChain $334K arbitrum, avalanche, base, bsc, ethereum, polygon Access Control Attacks
406 BitFinex $332K bitcoin Access Control Attacks
407 Goldfinch Finance $330K ethereum Access Control Attacks
408 Galaxy Fox $330K ethereum Access Control Attacks
409 Voltage V3 $322K fuse Access Control Attacks
410 Locus Finance $321K arbitrum, ethereum Access Control Attacks
411 Bitcoinica $303K — Access Control Attacks
412 ShadowFi $303K bsc Access Control Attacks
413 Coinbase $300K ethereum Access Control Attacks
414 MoonHacker $300K optimism Access Control Attacks
415 ParaSwap $300K ethereum Access Control Attacks
416 Amun $300K ethereum, polygon Access Control Attacks
417 Lucky Star $297K — Access Control Attacks
418 Tales of Elleria $280K arbitrum Access Control Attacks
419 796 $270K bitcoin Access Control Attacks
420 Shapeshift $269K — Access Control Attacks
421 Zerobase $250K bsc Access Control Attacks
422 Hacken Token $250K — Access Control Attacks
423 Spectral Labs $250K ethereum Access Control Attacks
424 ULME $250K bsc Access Control Attacks
425 Bitomat $236K — Access Control Attacks
426 Gondi $230K ethereum Access Control Attacks
427 ShapeShift $230K bitcoin Access Control Attacks
428 Ledger $224K — Access Control Attacks
429 Renegade $209K arbitrum Access Control Attacks
430 Rare Bears $206K — Access Control Attacks
431 Bitmit $202K — Access Control Attacks
432 USPD $200K — Access Control Attacks
433 Keep3r Network $200K ethereum Access Control Attacks
434 SNOOKER $198K bsc Access Control Attacks
435 Rabby Wallet $194K — Access Control Attacks
436 Holdstation $192K — Access Control Attacks
437 FENGSHOU Token $191K bsc Access Control Attacks
438 Layer2DAO $190K optimism Access Control Attacks
439 SynapLogic $186K base Access Control Attacks
440 MetaDragonDao $181K bsc Access Control Attacks
441 CivFund $180K ethereum Access Control Attacks
442 CIVNFT $180K ethereum Access Control Attacks
443 CoW Swap $180K ethereum Access Control Attacks
444 Bill Muray Wallet Hack $178K — Access Control Attacks
445 Stake DAO $176K arbitrum, base Access Control Attacks
446 SharedStake $175K ethereum Access Control Attacks
447 DoodiPals $171K solana Access Control Attacks
448 ZigGap $169K — Access Control Attacks
449 PicoStocks $167K — Access Control Attacks
450 Stobox Exchange $166K — Access Control Attacks
451 MAID $166K — Access Control Attacks
452 Enjin $162K ethereum Access Control Attacks
453 DappNode $158K — Access Control Attacks
454 TrustPad $155K bsc Access Control Attacks
455 DBXen $150K ethereum Access Control Attacks
456 MyEtherWallet $150K — Access Control Attacks
457 Ink Finance $140K polygon Access Control Attacks
458 Ratz Club $140K — Access Control Attacks
459 Quant $138K ethereum Access Control Attacks
460 SubQuery Network $134K base Access Control Attacks
461 ShapeShift FOX Colony $133K arbitrum Access Control Attacks
462 Perpy $132K arbitrum Access Control Attacks
463 Ara Finance $131K bsc Access Control Attacks
464 Dexmax AI $130K ethereum Access Control Attacks
465 MSCST $130K bsc Access Control Attacks
466 Molt EVM $127K base Access Control Attacks
467 Biki $123K — Access Control Attacks
468 Just-Dice $123K — Access Control Attacks
469 Twitter $120K — Access Control Attacks
470 YON $118K bsc Access Control Attacks
471 Local Traders $118K bsc Access Control Attacks
472 Cdecker $113K — Access Control Attacks
473 WXETA $110K bsc, ethereum Access Control Attacks
474 Mars Meta Space $102K — Access Control Attacks
475 Huma Finance V2 $101K polygon Access Control Attacks
476 OPSEC $100K ethereum Access Control Attacks
477 Coinbase $100K — Access Control Attacks
478 Bitcash $100K bitcoin Access Control Attacks
479 ONTR $98K ethereum Access Control Attacks
480 CityDAO $95K — Access Control Attacks
481 Citizen Finance $94K bsc, polygon Access Control Attacks
482 Citadel.one $93K arbitrum Access Control Attacks
483 Stake DAO $91K arbitrum Access Control Attacks
484 Berally $90K berachain Access Control Attacks
485 Melo $90K bsc Access Control Attacks
486 Brahma Finance $90K ethereum Access Control Attacks
487 CheckoutPool $86K polygon Access Control Attacks
488 BTC24H $86K polygon Access Control Attacks
489 four.meme $80K bsc Access Control Attacks
490 Pirate x Pirate $78K bsc Access Control Attacks
491 Spectra Finance $73K ethereum Access Control Attacks
492 Karastar $69K — Access Control Attacks
493 Wise Lending V2 $66K arbitrum, ethereum Access Control Attacks
494 MainnetSettler $66K ethereum Access Control Attacks
495 Saga DAO $66K solana Access Control Attacks
496 Hackerdao $65K bsc Access Control Attacks
497 Custom sAVAX Rebalancer $64K avalanche Access Control Attacks
498 Benqi Staked Avax $64K avalanche Access Control Attacks
499 Fantom $62K — Access Control Attacks
500 CoW $59K ethereum Access Control Attacks

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.