What happened
The token contract owner was setted to 0x38f614dd…88459e address, according to the contract overview:
https://etherscan.io/token/0xc84ed036…7a1e94#readContract
The transaction below shows that he was able to generate 1.8 trillion DIV tokens onto his wallet:
https://etherscan.io/tx/0x5776d1e8…c67c82
Subsequently, these tokens were sold, of which he received ~137.2 ETH. Transaction list:
https://bloxy.info/txs/calls_from/0x38f614dd…88459e?signature_id=1102188&smart_contract_address_bin=0x7a250d56…f2488d
Another wallet, which participated in this event, used a smart contract backdoor and was able to execute mint and sell tokens in the same transaction, additionally gaining 17.6 ETH:
https://etherscan.io/tx/0x619ecf49…ea1b9a
Case & protocol details
Evidence & learning
Sources and on-chain records
- report Report twitter.com
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.