SwanBluechipHack historyBinance tracker
Hack history / 2022 / Hack or exploit

Gym Network

Hack or exploit on Jun 8, 2022 · Improper Access Control

SOURCES AGREE ON DATE AND LOSS · 5 SOURCES
Lost
$2.1M
dollars at the time
Returned
none listed
as the sources state it
Rank
#678
among thefts by dollars lost

What happened

GYM Network deployed a new contract function on June 6, 2022. On June 8, attacker exploited missing caller verification in depositFromOtherContract() to create deposit records without actually transferring tokens, inflating balance and draining approximately 2,475.91 WBNB (~$716K). Funds were laundered through Tornado Cash.

Details

Date
Jun 8, 2022
Kind
Hack or exploit
Method
Improper Access Control
How in
Smart contract bug
Target
DeFi protocol
Chains
BNB Chain
Audit (rekt.news)
out of scope

Reported by

Related incidents

Mirror 2022 · Hack or exploit · $88M
Wintermute 2022 · Hack or exploit · $17.6M
Crema Finance 2022 · Hack or exploit · $8.8M
Ankr 2022 · Hack or exploit · $5M
TempleDAO 2022 · Hack or exploit · $2.3M
Cite this pageSwanBluechip, "Gym Network hack, Jun 8, 2022: $2.1M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htcfe8443557/ (data as of 2026-10-31).
Open in the full listAll incidents