What happened
Quick Summary
On the 26th of March BNQ on the BSC chain was rugged for ~$72K USD.
Details of the Exploit
- The BNQ deployer previously was funded by the tornado.cash, so we can claim it was a rug pull.
- The contract owner initiated a function safePull() call to receive a significant amount of BNQ
- The scammer received 190,000,000 BNQ and swapped the largest part for $72,652USDT.
Block Data Reference
Tornado cash funding:
Transfer:
Example of swap:
safePull calls:
Protocol details
Classification
Token
Protocol Type
Exit Scam/Rugpull
Affected asset / contract
BNQ
Evidence
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
