Hack history / 2023 / Hack or exploit
Pond0x
Hack or exploit on Jul 28, 2023 · Arbitrary External Call
SOURCES AGREE ON DATE AND LOSS · 3 SOURCES
Lost
$2.2M
dollars at the time
Returned
none listed
as the sources state it
Rank
#659
among thefts by dollars lost
What happened
Pond0x's directTransfer() function allowed any account to transfer tokens from any other address without authorization. The function exposed an internal _transfer function with no access controls, enabling attackers to drain funds by moving tokens from any address to their own.
Details
- Date
- Jul 28, 2023
- Kind
- Hack or exploit
- Method
- Arbitrary External Call
- How in
- Smart contract bug
- Target
- Token
- Chains
- Ethereum
Related incidents
Hope Finance 2023 · Hack or exploit · $2M
Dexible V2 2023 · Hack or exploit · $1.8M
Flooring Protocol 2023 · Hack or exploit · $1.6M
Maestro 2023 · Hack or exploit · $500K
CoWSwap 2023 · Hack or exploit · $180K
Dexible V2 2023 · Hack or exploit · $1.8M
Flooring Protocol 2023 · Hack or exploit · $1.6M
Maestro 2023 · Hack or exploit · $500K
CoWSwap 2023 · Hack or exploit · $180K
Cite this page
SwanBluechip, "Pond0x hack, Jul 28, 2023: $2.2M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht24f7778a78/ (data as of 2026-11-01).