Deriswap Rug Pull
What happened
The team merely had a Github profile and a Telegram group, without a full-fledged website and documentation. They posted a bogus Quantstamp audit on Github to confuse the community. The project team pointed to an official report by Andre Cronje about a December conversation between Yearn and Sushi to show even more legit intentions. It's a second time, where anon dev teams use bogus Deriswap contracts to replicate Andre Cronje's work.
The contract deployer added initial liquidity at:
The liquidity was removed by the contract deployer at:
Protocol details
Evidence
- report Report t.me
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.