DefiLabs Hack

TOTAL LOST $1.6M
Medium Rugpull

What happened

Quick Summary

DefiLabs Farm was rugpulled via a deployer-related address, draining multiple assets worth 1,634,351 $USD.

Details of the Exploit

DefiLabs Farm, a staking platform on the Binance Smart Chain, experienced an exitscam. The deployer of the vPoolv6 contract set a new privileged address 'funder'. This address then withdrew funds from the contract using the 'withdrawFunds' function and transferred them to another EOA.

The exploited assets included USDT, BTC, ETH, and CAKE tokens, with a total loss estimated at 1,634,351 $USD.

Block Data Reference

Deployer Address:

https://bscscan.com/address/0xfd2f26dc…b34115

Scammer's Address:

https://bscscan.com/address/0xee08d6c3…cf0be2

Funds Holder Address:

https://bscscan.com/address/0xfd2f26dc…b34115

Setting Privileged Address Transaction:

https://bscscan.com/tx/0x0f029cc8…9b57c4

Draining Transaction:

https://bscscan.com/tx/0xcd255e0d…c01e99

Case & protocol details

Classification Token
Protocol Type Exit Scam/Rugpull
Official Website defilabs.farm/
Protocol Twitter/X @defilabs_farm

Evidence & learning

Sources and on-chain records

Browse all hacks

Other incidents recorded with the same attack technique.

Pepe Trump $38K
NYC Memecoin $3.4M
OracleBNB $80K
Aqua $4.7M

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes