ArenaPlayAPC Rug Pull

Reported loss $204K
Rugpull

What happened

A soft rugpull was noticed in the $APC token. The team took away approximately 1200 $BNB in profit.

The creator of the token deployed the contract to the BSC network, where 100M tokens were minted on the address (B):

Tx 0x0fb8…f2b8

Address (B) sent 150k $APC to the address (C) in this transaction:

Tx 0x9651…7322

Then address (C) interacted with address (D) that later transferred 1200 $BNB through Tornado.cash:

Interactions transaction: Tx 0x1097…3762

Address (E) received 1M $USDT from Binance Hot Wallet and 14 $BNB from Tornado.cash which then distributed funds to the bot addresses:

Tx 0x9460…723a

Bots started creating fake trade volume in order to attract investor's attention in this project. When investors deposited funds into the token, part of the money ~1.2M $USDT was sent to address (D) in multiple transactions.

Example transactions:

  1. Tx 0x542f…edf3
  2. Tx 0x0246…f018
  3. Tx 0xb7a5…57e0

Then 1200 $BNB was withdrawn via Tornado.cash.

As the time writing information on this case is scarce. More sources will be added if the case should develop.

Involved addresses:

Token creator (A): Address 0x4e6b…f81f

Address (B): Address 0x3424…3e32

Address (C): Address 0xd73f…d9de

Address (D): Address 0x0fc7…dcbe

Address (E): Address 0x1703…08AC

Example bot addresses:

Address (F): Address 0xea2d…5777

Address (G): Address 0x03a0…8a0f

Address (H): Address 0xcdb2…d73f

Token creation: Tx 0x0fb8…f2b8

Protocol details

Classification Gaming / Metaverse / Token
Protocol Type Exit Scam/Rugpull
Affected asset / contract APC
Protocol links Website @ArenaPlayAPC

Evidence

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.