Not to be confused with cryptocom, the Crypto.com exchange.
Crypto DAO (BNB Chain Access-Control Exploit, July 2026)
Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →
anchored·38EAbx…4tgqSummary
Crypto DAO is a protocol deployed on BNB Chain whose Pro token vault contract was exploited on July 28, 2026, resulting in the loss of approximately $8.2 million in USDT. The root cause was a publicly callable vault function with no access-control modifier, allowing any external actor to trigger a full treasury drain without privileged credentials. As of the date of this investigation, no team communication, recovery plan, or post-mortem had been published.
Connected Entities
3 entities · 60 linked investigations- Crypto DAO (BNB Chain Access-Control Exploit, July 2026)→mentioned with→Binance(70%)
- DLMC Token (BNB Chain Flash Loan Exploit)→mentioned with→Binance(70%)
- Crypto DAO (BNB Chain Access-Control Exploit, July 2026)→mentioned with→DLMC Token (BNB Chain Flash Loan Exploit)(80%)
Connected Through
2 shared actors · 450 investigationsDistinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.
- □Binanceorganization
- ♦DLMC Token (BNB Chain Flash Loan Exploit)token
Timeline(4 events)
28 July 2026
Attacker called an unguarded vault function on Crypto DAO's Pro token contract on BNB Chain, draining approximately $8.2 million in USDT. Funds were split across three wallets controlled by attacker address 0x427671b2C8e91034A91FE698F9B7259b2345F45D.
CryptoTimes / Blockaid detection28 July 2026
Blockaid flagged the active exploit on-chain in real time and attributed the root cause to a missing access-control modifier on the vault function.
CryptoTimes29 July 2026
CryptoTimes published the first detailed public report of the exploit. SlowMist's Hacked database logged the incident. DeFiLlama categorized it under Protocol Logic (Solidity) losses. No team response had been issued by publication time.
CryptoTimes29 July 2026
Blockaid released its H1 2026 security report, recording a record 212 on-chain exploits and over $1.1 billion in losses for the first half of 2026, the broader environment in which the Crypto DAO exploit occurred.
The Block / CryptoTimesDecision Log
- slot 445505349 · hash DEf5UQP2MpXEjyFqiJgear9FYyyTrJvKLTz6t5jNdDUW
- slot 443505857 · hash HfyrWGQnWsxw3yzKyfCrXghqhTPHEg3n7GG1TSJFQEzg
- slot 443505852 · hash FUHzvHCpeoC3gon2KQXK8tMUKYj4cCgYK2ZiQmfHLfos
- slot 443502750 · hash FRzq6zo1cvSudHSkxxjh9FECZw8o5pmV3zP8khqxzBY6
This investigation is cryptographically anchored to the Solana blockchain (4 decisions). 9 of 9 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 7/29/2026, 5:08:27 PM
last updated: 7/29/2026, 5:08:27 PM
6 viewsavoid.net — verified advice for a post-truth world