BONK Inu Hack
What happened
BONK Inu fake token was rugged on the Polygon network. The scammers withdrew about $150k USD of USDC from liquidity pairs.
The BONK Inu ERC20 contract contains onlyOwner function with the minting ability. Also, the scammer didn't lock his LP tokens so he did both steps to rug users: 1) remove liquidity from pairs and 2) sell tokens to drain all left liquidity. Estimate losses are about $150k USD.
Scammer address:
https://polygonscan.com/address/0xbcefc34e…bb9e72
Minting tx:
https://polygonscan.com/tx/0xd043614e…cae655
Remove liquidity:
https://polygonscan.com/tx/0x72ddca4c…196202
Sell BONK:
https://polygonscan.com/tx/0xb6f40cd7…c216fe
Transfer USDC to another address:
https://polygonscan.com/tx/0xf64652b1…fe1b0e
https://polygonscan.com/tx/0xd0e7e5fc…7e4f57
https://polygonscan.com/tx/0x5abc0855…5fd074
Case & protocol details
Evidence & learning
Sources and on-chain records
- report Report twitter.com
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.