DistX Hack
What happened
The contract deployer was holding unfair distribution of the tokens to the following addresses:
https://etherscan.io/tx/0x163016f5…775ec1
https://etherscan.io/tx/0x573466be…bd65ae
https://etherscan.io/tx/0xa71c693d…5ab8f8
0xdf7:
- added the initial liquidity to the pair using funds from the presale:
https://etherscan.io/tx/0x36c132ed…dc6d85
- funds for the initial liquidity were got from the external wallet which gathered them from the presale event:
https://etherscan.io/tx/0x73df6020…b0fb0c
- the rest funds were transferred to the external wallet:
https://etherscan.io/tx/0x5bfed01a…2f2a8a
- the liquidity was removed by this address:
https://etherscan.io/tx/0x2e1b4acf…4fe5cf
0x6fa:
- sold tokens in multiple transactions:
https://etherscan.io/tx/0x430e21ad…a72e20
https://etherscan.io/tx/0xcfd6b9c5…2abcdd
https://etherscan.io/tx/0x1b55571c…1ab129
https://etherscan.io/tx/0x4eabcaa1…7342a6
https://etherscan.io/tx/0x02fca546…fdce7e
https://etherscan.io/tx/0x9d2c7599…058c96
https://etherscan.io/tx/0x52774006…b4048a
0xc6b:
- collected funds and distributed tokens (presale)
Case & protocol details
Evidence & learning
Sources and on-chain records
- report Report cryptoslate.com
- analysis Web Archive web.archive.org
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.