Bridge Incident Registry
Incident case

pNetwork 2022 pGALA contract-control incident

A deployment misconfiguration allowed covert takeover of the pGALA token contract on BNB Chain. pNetwork stopped processing pGALA bridge operations and performed an emergency whitehat drain of the PancakeSwap pool; the GALA collateral on Ethereum was not stolen from the bridge.

reviewedcurrent

Incident facts

Incident title
pNetwork 2022 pGALA contract-control incident
Bridge
pNetwork
Incident date
2022-11-03
Incident type
Security Misconfiguration
Major incident
Yes
Affected chains
Ethereum, BNB Chain
Affected assets
GALA, BNB
Attack category
Contract Ownership Misconfiguration
Reported loss
No bridge collateral loss reported
Recovery
Whitehat Recovery
Reimbursement
Announced
Restart
Token Replacement Planned
Current outcome
Affected Token Deprecated
Resolution
Unresolved
Last reviewed
2026-06-15
Last verified
2026-06-15

Timeline events

  • pGALA contract-control issue detected2022-11-03

    pNetwork identified a deployment misconfiguration, secured the Ethereum collateral, and stopped processing pGALA bridge operations.

    Contract Control Issue Detected And Bridge Processing StoppedHigh

  • pNetwork conducted an emergency whitehat pool drain2022-11-03

    pNetwork minted uncollateralized pGALA to drain the vulnerable PancakeSwap pool before malicious use and ultimately collected 12,977 BNB.

    Whitehat Pool DrainHigh

  • pGALA replacement and recovery plan announced2022-11-05

    pNetwork described replacing the compromised pGALA contract and returning whitehat-collected BNB according to snapshots.

    Token Replacement And Recovery Plan AnnouncedHigh

  • pGALA redistribution delayed2022-11-11

    pNetwork said legal and compliance requirements delayed the planned 12,977 BNB redistribution.

    Recovery Plan DelayedHigh

Evidence records

Known unknowns