Hack history / 2022 / Hack or exploit
UvToken
Hack or exploit on Oct 27, 2022 · Improper Access Control
SOURCES AGREE ON DATE AND LOSS · 2 SOURCES
Lost
$1.5M
dollars at the time
Returned
none listed
as the sources state it
Rank
#795
among thefts by dollars lost
What happened
On October 27, 2022, UvToken's mining pool contract on BSC was exploited via a logic error in the withdrawal mechanism where input validation failed to authenticate the caller, allowing an attacker to make malicious calls and seize approximately 1,078 BNB and 1,161,991 BUSD (~$1.5M) from the vault.
Details
- Date
- Oct 27, 2022
- Kind
- Hack or exploit
- Method
- Improper Access Control
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- BNB Chain
Reported by
Related incidents
Mirror 2022 · Hack or exploit · $88M
Wintermute 2022 · Hack or exploit · $17.6M
Crema Finance 2022 · Hack or exploit · $8.8M
Ankr 2022 · Hack or exploit · $5M
TempleDAO 2022 · Hack or exploit · $2.3M
Wintermute 2022 · Hack or exploit · $17.6M
Crema Finance 2022 · Hack or exploit · $8.8M
Ankr 2022 · Hack or exploit · $5M
TempleDAO 2022 · Hack or exploit · $2.3M
Cite this page
SwanBluechip, "UvToken hack, Oct 27, 2022: $1.5M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht1078d05748/ (data as of 2026-11-01).