ChainSwap bridge suffered an access control vulnerability in its cross-chain quota code. The attacker exploited a logical flaw that allowed invalid, non-whitelisted addresses to bypass authorization, take control of target projects' BSC contracts, and mint tokens directly to the attacker's address for sale.