What happened
DeriTrade, a fake trading platform on Binance Smart Chain, was exploited by the deployer on August 2, 2023. The exit scam involved the minting of large amounts of DUSD (the project's stablecoin), followed by the removal of liquidity from the LP pool using the newly minted tokens. The total loss was 13,411 $USD or 54.52 BNB.
The deployer initiated the attack by minting a large number of DUSD tokens. They then utilized these tokens to drain the liquidity from the LP pool. The stolen funds were transferred through several EOA addresses before being deposited into TornadoCash to further obfuscate the trail.
This careful orchestration of transactions suggests a premeditated attack on the platform.
Deployer Address:
Scammer Address:
Liquidity Removal Transaction:
Minting Transaction:
TornadoCash Deposit Transaction:
Protocol details
Evidence
- report @AnciliaInc incident report twitter.com
- analysis Web Archive archive.ph
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
