shield Access Control · $14.5K loss

Forensic report: Stead access control cost $14.5K (June 2025)

On June 2025, Stead was exploited in a access control, resulting in approximately $14.5K in losses. That makes the Stead exploit the 362nd largest DeFi incident out of 690 documented in our archive.

Attack Mechanics: How the Stead Access Control Played Out

Exploit Class Applied to Stead

The Stead incident on June 29, 2025 is classified as a Access Control. A privileged function lacks a proper authorisation check, letting an unauthorised caller execute it. In the full archive, Stead is 1 of 77 documented access control incidents.

Stead in Context

At $14.5K, the Stead exploit is a minor (<$1M) event compared to the largest same-class incident in our archive — Corkprotocol (2025) at $12M.

Prior Access Control Before Stead

The nearest access control incident before Stead was Unverified_b5cb, 4 days earlier on June 25, 2025 ($2M lost). The same exploit class surfaced again within the access control attack surface.

Impact & Recovery for Stead

Stead Loss Figure

The Stead exploit caused $14,500 in losses — a minor (<$1M) incident and the 66th largest of 96 documented in 2025.

Where Stead Sits Among Access Control Attacks

Ranked by loss size, Stead is the 44th largest of 77 access control incidents documented. That puts the Stead loss below the class average of $636K.

Timeline Since the Stead Incident

The Stead exploit occurred 10 months ago (289 days). The contract, its fork-block, and the attack transaction remain on-chain and forensically reproducible.

Primary Reference for Stead

Public post-mortem / on-chain analysis for the Stead incident: view source.

FAQ

How much did Stead lose?

The Stead exploit in June 2025 resulted in $14,500 in losses — the 66th largest of 96 DeFi incidents that year.

When did the Stead hack happen?

The Stead exploit was recorded on June 29, 2025 — 289 days ago.

What type of exploit hit Stead?

The Stead incident is classified as a Access Control. A privileged function lacks a proper authorisation check, letting an unauthorised caller execute it.

How common is the Access Control pattern seen at Stead?

Our archive contains 77 documented access control incidents. The Stead incident is one of them.

How does Stead compare to the largest Access Control attack?

The largest access control incident in our archive is Corkprotocol (2025) at $12M. The Stead loss is $14.5K.

What problem does the zk-SNARKs-based anonymous payment channel aim to solve?

It addresses the scalability and privacy issues in cryptocurrencies by enabling off-chain payments with privacy protection.

How does the document assess the efficiency and memory of cryptocurrencies?

By using the Hurst exponent to determine if cryptocurrencies have persistent, anti-persistent, or random behaviors.