Block Forest Hack
What happened
Block Forest's pool was exploited via a flash loan attack resulting in the loss of 275,439 $USD.
Block Forest is a BEP20 token trading on PancakeSwap. The project's pool suffered from a flash loan attack. An attacker deployed a malicious contract with unverified source code and performed an attack in a single transaction.
The exploiter took out a flash loan from the DODO project and drained all liquidity worth 275,439 $USD from PancakePool. All stolen assets were transferred to another EOA address and currently remain there.
Attacker address:
https://bscscan.com/address/0x2d2bcd3c…4b44de
Funds holder address:
https://bscscan.com/address/0x7e394687…cbdc33
Malicious transaction:
https://bscscan.com/tx/0x5a89e083…1993ff
Malicious contract:
https://bscscan.com/address/0x8b5C1046…Cad968
Case & protocol details
Evidence & learning
Attack pattern
Compare incidents →Sources and on-chain records
- report Report twitter.com
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.