Block Forest Hack

Reported loss $275K
Flash Loan Attack

What happened

Block Forest's pool was exploited via a flash loan attack resulting in the loss of 275,439 $USD.

Block Forest is a BEP20 token trading on PancakeSwap. The project's pool suffered from a flash loan attack. An attacker deployed a malicious contract with unverified source code and performed an attack in a single transaction.

The exploiter took out a flash loan from the DODO project and drained all liquidity worth 275,439 $USD from PancakePool. All stolen assets were transferred to another EOA address and currently remain there.

Attacker address:

Address 0x2d2b…44de

Funds holder address:

Address 0x7e39…dc33

Malicious transaction:

Tx 0x5a89…93ff

Malicious contract:

Address 0x8b5C…d968

Protocol details

Classification Token
Protocol Type Exploit/Flash Loan Attack
Affected asset / contract BFT
Protocol links Website

Understand the attack patterns

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.