What happened
DeFiAi protocol was rugged by using a backdoor in the farm contract with a profit of more than 4M $USD.
DeFiAI is a yield aggregator and the first DEX run by AI. The project was rugpulled for 4,173,646 $USD. The funds were drained from the project's contract with unverified source code and distributed between 10 EOA addresses and then transferred through FixedFloat and MexcGlobal.
The project announced on Twitter that they were "hacked" and will rebase the remaining funds and reopen the project's smart contracts.
Unverified contract with malicious logic:
Withdraw example:
Rug pull TXs were selected by Mist:
Protocol details
Evidence
- report @DeFiAiOfficial incident report twitter.com
- report Report misttrack.io
- report Report web3isgoinggreat.com
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
