Banana Swap Hack

Banana Swap was exploited for the total amount of 110,105 in $BUSD due to contract vulnerability.

Banana Swap is a simple DEX intended for trading the $DDC token. Due to security issues of the project's smart contracts, an attacker was able to manipulate the price of the $DDC token. The attacker used a contract function to manipulate the internal price of $DDC.

The attacker broke the price calculation mechanism in the project's contract. The attacker swapped 23 $DDC for 110,105 $BUSD using a malicious smart contract. Consequently, stolen assets were distributed between 3 team-related EOA addresses.

Attacker address:

https://bscscan.com/address/0x5b69f9c6…24fdef

Attacker contract:

https://bscscan.com/address/0x8aec5edb…fd7abb

Affected contract:

https://bscscan.com/address/0x4efdcaba…e32bb0

Transaction:

https://bscscan.com/tx/0xd08cfb22…75f054

Malicious contracts:

https://bscscan.com/address/0x7aa5bf87…8b65a4

https://bscscan.com/address/0xf3038244…3d4c47

https://bscscan.com/address/0x8672cfb5…d5c93c

https://bscscan.com/address/0xe932fb81…dc9b53

https://bscscan.com/address/0x2f0908ab…55ce2f

https://bscscan.com/address/0x4efdcaba…e32bb0

https://bscscan.com/address/0xe1a5f7cb…255d4d