Hack history / 2023 / Hack or exploit
GYM Network
Hack or exploit on Jul 31, 2023 · Improper Access Control
ONE SOURCE · 1 SOURCE
Lost
$1K
dollars at the time
Returned
none listed
as the sources state it
Rank
#2,424
among thefts by dollars lost
What happened
GYM Network's _autoDeposit function had no transfer check, allowing users to call deposit() and create_deposit_record() without actually transferring tokens. An attacker repeatedly 'deposited' 8 million GYMNET tokens without sending any funds, then withdrew the fake deposit balance.
Details
- Date
- Jul 31, 2023
- Kind
- Hack or exploit
- Method
- Improper Access Control
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- BNB Chain
Reported by
Related incidents
Safemoon 2023 · Hack or exploit · $8.9M
Exactly 2023 · Hack or exploit · $7.5M
Terraport 2023 · Hack or exploit · $4M
Curve Finance MEV Bot 2023 · Hack or exploit · $2M
Atlantis Loans 2023 · Hack or exploit · $1.1M
Exactly 2023 · Hack or exploit · $7.5M
Terraport 2023 · Hack or exploit · $4M
Curve Finance MEV Bot 2023 · Hack or exploit · $2M
Atlantis Loans 2023 · Hack or exploit · $1.1M
Cite this page
SwanBluechip, "GYM Network hack, Jul 31, 2023: $1K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htcf0468f089/ (data as of 2026-10-31).