What happened
The exploiter:
The exploiter was a public team member and the deployer of this MasterChef contract:
He was able to invoke emergencyRewardWithdraw() to steal DEPO tokens, the example transactions:
Tokens were sold on Uniswap, the example transactions:
Stolen funds were transferred to the external wallet:
The funds' recipient deposited them into Tornado Cash mixer:
Protocol details
Evidence
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
