What happened
The attacker's address:
https://bscscan.com/address/0xbb1d1d43…0ef1d2
The transaction behind the attack:
https://bscscan.com/tx/0x85778af1…6abfd8
The deployed contract involved in the attack:
https://bscscan.com/address/0x9be506b1…aba9e0
The attacker:
- swapped 1 BNB on 2,860 CLCT on PancakeSwap
- invoked public burn() and pumped CLCT price
- sold 2,860 CLCT for 1,661 BNB
Stolen funds were deposited into the Tornado Cash mixer and distributed between external addresses.
Case & protocol details
Classification
NFT
Protocol Type
Exploit/Other
Affected asset / contract
CLCT
Official Website
www.collectco.in/
Protocol Twitter/X
@CLCTCoin
Evidence & learning
Sources and on-chain records
- report Report twitter.com
- report Report twitter.com
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.