Hack history / 2023 / Hack or exploit
TrustPad
Hack or exploit on Nov 6, 2023 · Improper Access Control
SOURCES AGREE ON DATE AND LOSS · 3 SOURCES
Lost
$155K
dollars at the time
Returned
none listed
as the sources state it
Rank
#1,563
among thefts by dollars lost
What happened
TrustPad's receiveUpPool() function on BNB Chain failed to verify msg.sender, allowing an attacker to repeatedly call the function and harvest pending rewards by manipulating lock periods through untrusted external calls.
Details
- Date
- Nov 6, 2023
- Kind
- Hack or exploit
- Method
- Improper Access Control
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- BNB Chain
Reported by
Related incidents
Fake TrustPad (TPAD) 2023 · Rug pull · $240K
Safemoon 2023 · Hack or exploit · $8.9M
Exactly 2023 · Hack or exploit · $7.5M
Terraport 2023 · Hack or exploit · $4M
Curve Finance MEV Bot 2023 · Hack or exploit · $2M
Safemoon 2023 · Hack or exploit · $8.9M
Exactly 2023 · Hack or exploit · $7.5M
Terraport 2023 · Hack or exploit · $4M
Curve Finance MEV Bot 2023 · Hack or exploit · $2M
Cite this page
SwanBluechip, "TrustPad hack, Nov 6, 2023: $155K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht4c464935e7/ (data as of 2026-11-01).