AFKSystems Finance Hack
What happened
The EOA address deployed unverified smart contract at:
https://polygonscan.com/tx/0x371b8da1…341eb5
This smart contract interacted with different MasterChef contracts:
https://polygonscan.com/tx/0xa4dafd21…3fe470
https://polygonscan.com/tx/0x5a27947b…028de9
https://polygonscan.com/tx/0x758ca246…541e8b
https://polygonscan.com/tx/0xcb729d6c…d5038f
https://polygonscan.com/tx/0x80fc64a2…47860f
The bytecoded contract had approval for spending LP tokens, as a result, funds were transferred to the external address:
https://polygonscan.com/address/0x0a301bdf…6109e7
Withdrawn LP tokens were used to remove liquidity at:
https://polygonscan.com/tx/0xf68759da…099dc8
https://polygonscan.com/tx/0x9f4d43f1…91a155
Case & protocol details
Evidence & learning
Sources and on-chain records
- report Report afksystem.finance
- analysis Web Archive web.archive.org
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.