Security Incident
Bonfiretoken Smart Contract Vulnerability: $50.00K Reported Loss
The BonfireSwap router’s transfer lacked access control: it did not require msg.sender == from or check the caller’s allowance on from.
- Reported loss
- $ 50,000
- Attack category
- Smart Contract Vulnerability
Incident Overview
An attacker set approved holders as from and themselves as to, drained TOKEN via existing victim→router allowances, then forwarded funds through a same-token pool swap. About 41 approved holders were hit; loss ~$50,000.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.