CLOUD NFT Hack

The CLOUD NFT project on the Binance Smart Chain was hit by a rugpull, resulting in a loss of 518,870 $USD.

CLOUD NFT is a BEP721 token. The scammer used the token sale contract's privileged function recoverLostTokensExceptOurTokens() to withdraw funds in two transactions, totaling 518,870 $USD. The funds were then transferred to another externally owned address.

Subsequently, this EOA address swapped USDT for 1270 $BNB and transferred the funds through TornadoCash, while the remaining funds are still held at the address.

Scammer Address:

https://bscscan.com/address/0x80593c0B…d07928

Funds Holder:

https://bscscan.com/address/0x6176D700…2fae52

Liquidity Drain Transactions:

https://bscscan.com/tx/0x9edb872e…5e7cfe

https://bscscan.com/tx/0x184c6bce…25ec95

Funds Moving Transaction Example:

https://bscscan.com/tx/0x9a977c5c…c586f7

Tornado Cash Transaction Example:

https://bscscan.com/tx/0x90612f91…000ae8