What happened
The hackers attacked Chainswap’s contracts and stole a little over 3 million $UMB tokens on ETH from the Chainswap vault, which was the entirety of the UMB tokens available there. The hackers also managed to mint an additional 20 million in UMB tokens on the BSC side but did not manage to sell them before all UMB tokens there were frozen.
The transactions the hackers have made:
https://docs.google.com/spreadsheets/d/1KxLpMvhypikrcNph7NAimeFdyPbRK1rrw-6yAcREqa4/edit?usp=sharing
Case & protocol details
Classification
Other
Protocol Type
Oracle
Affected asset / contract
UMB
Official Website
umb.network/
Protocol Twitter/X
@umbnetwork
Evidence & learning
Sources and on-chain records
- report Post-mortem medium.com
- report Post-mortem medium.com
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.