DeFiAi Hack

TOTAL LOST $4.2M
Medium Rugpull

What happened

Quick Summary

DeFiAi protocol was rugged by using a backdoor in the farm contract with a profit of more than 4M $USD.

Details of the Exploit

DeFiAI is a yield aggregator and the first DEX run by AI. The project was rugpulled for 4,173,646 $USD. The funds were drained from the project's contract with unverified source code and distributed between 10 EOA addresses and then transferred through FixedFloat and MexcGlobal.

The project announced on Twitter that they were "hacked" and will rebase the remaining funds and reopen the project's smart contracts.

Block Data Reference

Unverified contract with malicious logic:

https://bscscan.com/address/0x042a97c6…cdf722

Withdraw example:

https://bscscan.com/tx/0x39462d56…c248ce

Rug pull TXs were selected by Mist:

https://misttrack.io/s/b4Dm0

Case & protocol details

Classification Yield Aggregator
Protocol Type Exit Scam/Rugpull
Affected asset / contract DFAI
Official Website www.defiai.ai/
Protocol Twitter/X @DeFiAiOfficial

Evidence & learning

Sources and on-chain records

Browse all hacks

Other incidents recorded with the same attack technique.

Pepe Trump $38K
NYC Memecoin $3.4M
OracleBNB $80K
Aqua $4.7M

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes