DEFI-VESTING-PERMPrivilege Escalation

Vesting Beneficiary Replace

Bug lets the attacker call setBeneficiary on a vesting schedule — redirect the entire stream to attacker address.

§ Where this technique fits

DEFI-VESTING-PERM is catalogued under the Privilege Escalation tactic of the offensive-security kill-chain. It appears in 1 approved dossier in the registry, typically at step 2 on average.

§ Dossiers chaining this technique

Vesting beneficiary replace → silently drain stream
Bug in a custom vesting contract allows anyone to call setBeneficiary on existing schedules. Replace beneficiary with attacker address; legitimate token stream now flows to attacker until released funds are noticed.
step 2 / 5

§ What commonly comes next

01
Vesting Contract Drain
DEFI-VESTING-DRAIN · Impact
seen 1×

§ Where this technique fits

§ Dossiers chaining this technique

Vesting beneficiary replace → silently drain stream

§ What commonly comes next