What happened
Umbrella Network's UMB tokens were affected by the ChainSwap bridge exploit. Tokens were stolen from ChainSwap's Ethereum vault, and additional UMB was minted on BNB Smart Chain. Umbrella reported that the newly minted tokens were frozen before they could be sold.
Technical root cause
The affected component was ChainSwap's bridge infrastructure: attackers extracted escrowed UMB on Ethereum and minted additional tokens on BNB Smart Chain. Umbrella's incident update does not identify a vulnerable function in its oracle contracts.
How it happened
- Attackers compromised ChainSwap's contracts, affecting Umbrella and other token projects.
- They removed the UMB balance from ChainSwap's Ethereum vault.
- They also minted additional UMB on BNB Smart Chain, where the tokens were frozen before sale.
- Umbrella announced replacement BSC tokens and a buyback program in response.
Protocol details
Classification
Other
Protocol Type
Oracle
Affected asset / contract
UMB
Protocol links
Website
@umbnetwork
Evidence
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
