BabyDAO Hack
What happened
The $BabyDAO token has been rugpulled by the token creator for $7.6k. Then funds where sent to another address from which they were laundered via Tornado.cash.
The token creator deployed a BabyDAO contract, where 10T tokens were minted to his account (https://bscscan.com/tx/0x3af2f636…650e88).
After the token deployment, the scammer address created a pair on PancakeSwap of $10 WBNB and $100M BabyDAO (https://bscscan.com/tx/0x8ad196e5…8f183b).
After 14 days, 300 $BNB was sent to the deployer's address, of which 290 $BNB was used to increase the liquidity pool on PancakeSwap.
Transfer transactions to deployer's address: https://bscscan.com/tx/0x166c1ced…231429
Adding liquidity to PancakeSwap: https://bscscan.com/tx/0x67e83954…ccec3c
When the price of the token went up, the deployer removed liquidity and took a profit of 32.25 $WBNB. All the funds were transferred to another address where funds were laundered via Tornado.cash.
Transferring funds to address from which funds were laundered via Tornado.cash: https://bscscan.com/tx/0x40a34d6f…a31ea3
As the time of this writing information on this case is scarce. More sources will be added if the case should develop.
Creator address: https://bscscan.com/address/0xe153c4b6…29c78a
The address to which the tokens were sent for laundering via Tornado.cash: https://bscscan.com/address/0xd759da59…eb7f0a
Token address: https://bscscan.com/address/0xf2d5d38f…6b0f5f
Case & protocol details
Evidence & learning
Sources and on-chain records
- report Report dexscreener.com
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.