DEFI-VESTING-DRAINImpact

Vesting Contract Drain

Misconfigured vesting / streaming contract reverts on safety checks but transfers tokens anyway — net positive flow to attacker (real 2024 incidents).

§ Where this technique fits

DEFI-VESTING-DRAIN is catalogued under the Impact tactic of the offensive-security kill-chain. It appears in 1 approved dossier in the registry, typically at step 3 on average.

§ Dossiers chaining this technique

Vesting beneficiary replace → silently drain stream
Bug in a custom vesting contract allows anyone to call setBeneficiary on existing schedules. Replace beneficiary with attacker address; legitimate token stream now flows to attacker until released funds are noticed.
step 3 / 5

§ What commonly comes next

01
Valid Accounts
T1078 · Initial Access
seen 1×

§ Where this technique fits

§ Dossiers chaining this technique

Vesting beneficiary replace → silently drain stream

§ What commonly comes next