Dragoma Hack

Play-to-earn game Dragoma was rug pulled by its team, for $3,500,000 $USD.

Dragoma is an application with built-in GameFi and SocialFi elements. In the game, users were invited to form dragon training teams and receive rewards for their breeding, training, and competitions.

The project team drained the funds of its investors and withdrew the funds to a centralized exchange. The initial token holder EOA drained the pools after receiving 38,000,000 $DMA tokens from the project's vault contract with unverified source code. The token transfer transaction was initiated by the token deployer. As soon as they closed the project without announcing their community, they doubled the suspicion that the project is a scam by deleting their website, as well as all social networks. As the news about the scam spread among the community, the price of the token itself also collapsed, falling to 99%.

Attacker address:

https://polygonscan.com/address/0x4c0ce1c7…db595d

Vault contract:

https://polygonscan.com/address/0xcec6540b…cb3929

Token transfer transaction:

https://polygonscan.com/tx/0x70ce1369…7129d2

Drain transaction example:

https://polygonscan.com/tx/0x7bbe8cc7…348c30