Elephant Money Hack

Elephant Money suffers flash loan attack leading to a loss of $163,415 USD.

On December 6th, 2023, Elephant Money, a project running on Binance Smart Chain with its BEP20 token ELEPHANT, fell victim to a flash loan attack. The attacker exploited the project by calling sweep() to force the contract to withdraw funds and execute a swap without slippage protection. As a result, the attacker managed to steal 163,638 BUSD in two transactions.

The stolen funds remain in the attacker's wallet as BUSD.

Attacker address:

https://bscscan.com/address/0xbbcc1399…F1D66D

Malicious Transactions:

https://bscscan.com/tx/0xd423ae0e…523439

https://bscscan.com/tx/0x7ccb189c…2d5218

Malicious contract:

https://bscscan.com/address/0x69BD13F7…8D6Bcf