Preview surface — demo data. Where real data exists today (e.g. RealT, BlackRock BUIDL, Lift Dollar) we render it; everywhere else we render synthetic enrichment generated deterministically from public signal and clearly marked Demo or Inferred. The Phase 3 roadmap replaces every synthetic source with live ingestion — see Methodology → Exposure Graph & Similarity Engine.
← back to incident ledger

access control missingDemo

Apr 5, 2024 · $1.4M · protocol

Narrative

On 2024-04-05, Shell Protocol suffered a access control missing incident resulting in approximately $1,436,492 in losses. The exploit targeted the protocol layer. Attribution: unattributed_criminal. This is a demonstration entry — not a real incident.

Classification

Root cause
access_control_missing
Secondary causes
Attack layer
protocol
Strategy
tech_vuln
Actor role
target
Attribution
unattributed_criminal
Attacker address
0x664b05e44caf4ae69080dc4609ee31ddae6cdd74
Flash loan
no
Audited at time
no
Bounty at time
no

AADAPT mappings

DEMO:AADAPT.TA0004DEMO:AADAPT.TA0006DEMO:AADAPT.T1078

Evidence

Disclosure date
Apr 5, 2024
Funds recovered
Audit firms at time
Post-mortem URLs (synthetic)
  • https://medium.com/shell-protocol/post-mortem-shell-protocol-2024-04-05
  • https://rekt.news/shell-protocol-rekt
  • https://blog.shell-protocol.xyz/incident-report
tx hashes (2)
  • 0xd7cd91359b1b9da703b03b134b7e435cff1cebbb334b9799e3ce0f5efacbf1be
  • 0x64b9e999a53afad657cbb96e36eb754dc3424dceb6791d115e7d814d920d9dd5