Skip to main content
AVOID.NET
Sign in

Crypto DAO (BNB Chain Access-Control Exploit, July 2026)

avoid.net/crypto-dao-bnb-chain-access-control-exploit-july-2026→0/100·82% conf.
[AI-DRAFTED · AWAITING VERIFICATION]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·38EAbx…4tgq

Summary

Crypto DAO is a protocol deployed on BNB Chain whose Pro token vault contract was exploited on July 28, 2026, resulting in the loss of approximately $8.2 million in USDT. The root cause was a publicly callable vault function with no access-control modifier, allowing any external actor to trigger a full treasury drain without privileged credentials. As of the date of this investigation, no team communication, recovery plan, or post-mortem had been published.

Connected Entities

1 entities
Organizations
□Crypto DAO (BNB Chain Access-Control Exploit, July 2026)
Relationships
    Have evidence about Crypto DAO (BNB Chain Access-Control Exploit, July 2026)?

    Timeline(4 events)

    28 July 2026

    Attacker called an unguarded vault function on Crypto DAO's Pro token contract on BNB Chain, draining approximately $8.2 million in USDT. Funds were split across three wallets controlled by attacker address 0x427671b2C8e91034A91FE698F9B7259b2345F45D.

    CryptoTimes / Blockaid detection

    28 July 2026

    Blockaid flagged the active exploit on-chain in real time and attributed the root cause to a missing access-control modifier on the vault function.

    CryptoTimes

    29 July 2026

    CryptoTimes published the first detailed public report of the exploit. SlowMist's Hacked database logged the incident. DeFiLlama categorized it under Protocol Logic (Solidity) losses. No team response had been issued by publication time.

    CryptoTimes

    29 July 2026

    Blockaid released its H1 2026 security report, recording a record 212 on-chain exploits and over $1.1 billion in losses for the first half of 2026, the broader environment in which the Crypto DAO exploit occurred.

    The Block / CryptoTimes
    Provenance & Audit Trail
    Anchored on SolanaVerify on-chain8 Wayback Archives

    Decision Log

    This investigation is cryptographically anchored to the Solana blockchain (4 events). 8 of 9 cited source URLs have an Internet Archive snapshot.

    Fact-checked 2026-09-0723 claims checked1 correction pending0 applied⛓ anchoredSee findings →
    full audit log →version history →

    model: claude-sonnet-4-6

    generated: 7/29/2026, 5:08:27 PM

    last updated: 8/8/2026, 3:51:13 AM

    5 views

    avoid.net — verified advice for a post-truth world