ChainBleedv0.1 · open intel
← back to feed·ACCESS-CONTROL2025-10-28 · 7mo ago
Incident · SLOWMIST

GMGN

Phishing Attack
Estimated loss
$10.3K
VERDICT —UNRATED
Verdict pending. Auto-ingested incidents are reviewed before a public verdict is rendered.
▰ METHOD
ACCESS CONTROL
ACCESS-CONTROLBYTECODE CATCHABLEAI SCANNABLE
Root cause

Root-cause analysis not yet published. The incident description below contains all currently available signal — review the attack transaction directly for definitive forensics.

Forensic narrative

GMGN co-founder Haze posted on X (Twitter):"We have noticed a deliberate external phishing attack targeting GMGN. The attacker induced users to click by forging a third-party token website, triggering unauthorized transactions not initiated by the users themselves.Currently, this issue has been completely resolved, affected accounts have been restored to safety, and similar phishing attacks have been fully blocked.This incident affected approximately 107 users.For losses caused by unauthorized control of accounts, we will provide 100% full compensation and distribute it to GMGN accounts within today." Attack method (per SlowMist): Phishing Attack. Reported loss: $10,300.

Primary source
https://x.com/haze0x/status/1983042747406651440
Sourced from
slowmist
Technical record
chain
protocol
GMGN
bug_class
access-control
date_occurred
2025-10-28
loss_usd
$10,300
source_id
sm:gmgn::2025-10-28
Related — same bug class· access-control
2026-05-13
27d ago
ARB
ShapeShift FOX Colony (Colony Network)
executeMetaTransaction → resolver-repoint via setTarget → delegatecall drain
access-control
$132.7K
AUDIT-CATCHABLE
2026-05-12
28d ago
ETH
BoostHook
Uniswap V4 hook-contract logic exploit
access-control
$47.5K
UNRATED
2026-05-12
29d ago
Aurellion Labs
Contract Vulnerability
access-control
$455.0K
UNRATED
2026-05-11
29d ago
POLY
Huma Finance V1 (deprecated)
refreshAccount() unconditional GoodStanding state flip → unauthorized drawdown
access-control
$101.4K
AUDIT-CATCHABLE
2026-05-10
1mo ago
ARB
Renegade
Unprotected Initializer Exploit
access-control
$209.0K
UNRATED
2026-05-10
1mo ago
ARB
Renegade
Contract Vulnerability
access-control
$209.0K
UNRATED
ChainBleed — live web3 threat intelligence