DD coin Hack

Reported loss $307K
Other

What happened

On June 1, 2023, DD Coin's BNB Chain Marketplace was exploited through its sellItem payout logic. Reporting says the contract both paid the seller and approved that seller to pull the same BUSDT amount from the escrow, enabling a double withdrawal. The opened reports differ on whether to describe the loss as about $126,000 or $300,000.

How it happened

  1. The attacker obtained working capital using flash loans and acquired small amounts of DD.
  2. They called sellItem against Marketplace buy orders.
  3. The Marketplace paid the seller while also granting the seller a BUSDT allowance for the full sale amount.
  4. The attacker used transferFrom to pull the additional approved BUSDT from the shared escrow, then repaid the flash loans.

Protocol details

Classification Other
Protocol Type Exploit/Other
Affected asset / contract DD

Evidence

Same attack technique

Browse all hacks →
Ethereum Hive $16K lost SellToken $105K lost Unlock Protocol $38K lost MutantNFTs $25K lost

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes