Block Forest Hack

TOTAL LOST $275K
Low Flash Loan Attacks

What happened

Block Forest's pool was exploited via a flash loan attack resulting in the loss of 275,439 $USD.

Block Forest is a BEP20 token trading on PancakeSwap. The project's pool suffered from a flash loan attack. An attacker deployed a malicious contract with unverified source code and performed an attack in a single transaction.

The exploiter took out a flash loan from the DODO project and drained all liquidity worth 275,439 $USD from PancakePool. All stolen assets were transferred to another EOA address and currently remain there.

Attacker address:

https://bscscan.com/address/0x2d2bcd3c…4b44de

Funds holder address:

https://bscscan.com/address/0x7e394687…cbdc33

Malicious transaction:

https://bscscan.com/tx/0x5a89e083…1993ff

Malicious contract:

https://bscscan.com/address/0x8b5C1046…Cad968

Case & protocol details

Classification Token
Protocol Type Exploit/Flash Loan Attack
Affected asset / contract BFT
Official Website www.bft.finance/
Protocol Twitter/X @blocklords

Evidence & learning

Sources and on-chain records

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.