Real Access Control Hacks

Real incidents mapped to access control. Start with the records, open the source, then use the attack guide when an incident matches the code you are reviewing.

Incident records

Sorted by known reported loss first, then recency. Open the source before treating any summary as final.

Links
501 Revert Finance $29K ethereum Access Control Attacks
502 FPR $29K bsc Access Control Attacks
503 WealthManagementV2 $26K bsc Access Control Attacks
504 TokenHolder $26K bsc Access Control Attacks
505 Unistreets $18K ethereum Access Control Attacks
506 402bridge $18K base Access Control Attacks
507 Degen Millionares Club $17K — Access Control Attacks
508 Internet Token INT $16K base Access Control Attacks
509 MixedSwapRouter $16K arbitrum Access Control Attacks
510 DAppSocial $16K ethereum Access Control Attacks
511 Solend $16K solana Access Control Attacks
512 Betcoin $15K — Access Control Attacks
513 SushiSwap $15K ethereum Access Control Attacks
514 Erc20transfer $15K ethereum Access Control Attacks
515 OKX NFT Aggregator $14K bsc Access Control Attacks
516 HireVibes AirDropsDAC $14K eos Access Control Attacks
517 AUR Protocol $13K bsc Access Control Attacks
518 X319 $13K bsc Access Control Attacks
519 Bitcoin Syndicate $12K — Access Control Attacks
520 NFTG $10K bsc Access Control Attacks
521 ALP $10K bsc Access Control Attacks
522 FlippazOne $7K — Access Control Attacks
523 Rubixi $7K — Access Control Attacks
524 Bitmor $6K base Access Control Attacks
525 MBC & ZZSH $6K bsc Access Control Attacks
526 Pennysia $5K ethereum Access Control Attacks
527 Arcade $5K — Access Control Attacks
528 LocalBitcoins $4K — Access Control Attacks
529 Startale $3K ethereum Access Control Attacks
530 Ethscriptions $3K ethereum Access Control Attacks
531 ETHFIN $1K bsc Access Control Attacks
532 GYM Network $1K bsc Access Control Attacks
533 Zilliqa X-Bridge — zilliqa Access Control Attacks
534 GarudaDefi — terra classic Access Control Attacks
535 Dominion — solana Access Control Attacks
536 Surf Lending — cardano Access Control Attacks
537 StablR — ethereum Access Control Attacks
538 Rico — arbitrum Access Control Attacks
539 MetaLabz — bsc Access Control Attacks
540 AlphaPo — ethereum, tron Access Control Attacks
541 Ratio Finance — solana Access Control Attacks
542 Impermax — ethereum, polygon Access Control Attacks
543 Lunar Eclipse — binance Access Control Attacks
544 Poker EOS — eos Access Control Attacks
545 Zaif — bitcoin Access Control Attacks

Notes

Loss totals use parsed USD values only; unknown or unparseable losses are not guessed. Attack-class links are added only when the root cause is clear enough to map.