What happened
Diamond DND token was exploited for 223,335 $USD worth of $DND tokens. The exploiter used user approvals to drain funds.
Diamond DND is a BEP20 token trading on BiSwap. The exploiter user a smart contract with unverified source code, to transfer approved tokens of the users. 223,335 $USD worth of $DND and $BUSD tokens were swapped for $wBNB and then transferred to the malicious contract.
Consequently, all the stolen amount was sent to the attacker's address and the contract self-destructed. DND Exploiter performed another exploit just after this one, LaunchZone DeFi protocol was hacked by the same attacker for a much bigger amount...
Attacker address:
Malicious contract:
Token claim transaction:
Protocol details
Evidence
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
