What happened
The CLOUD NFT project on the Binance Smart Chain was hit by a rugpull, resulting in a loss of 518,870 $USD.
CLOUD NFT is a BEP721 token. The scammer used the token sale contract's privileged function recoverLostTokensExceptOurTokens() to withdraw funds in two transactions, totaling 518,870 $USD. The funds were then transferred to another externally owned address.
Subsequently, this EOA address swapped USDT for 1270 $BNB and transferred the funds through TornadoCash, while the remaining funds are still held at the address.
Scammer Address:
Funds Holder:
Liquidity Drain Transactions:
Funds Moving Transaction Example:
Tornado Cash Transaction Example:
Protocol details
Evidence
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
