Elongate Deluxe Hack

TOTAL LOST $230K
Low Rugpull

Summarize with AI

Affected Chain 2021 Incident surface
Recovered - No recovery reported
All-Time Rank #1245 By amount stolen
Protocol Type Exit Scam/Rugpull Target category

Incident Overview

ELongD token was exit scammed with deployer removing liquidity worth 230,455 USD from UniSwap pool in multiple transactions.

ELongD is an ERC20 token trading on UniSwap. On Aug 8, 2021, the scammer removed liquidity from the UniSwap pool in five transactions after receiving LP tokens from the UNCX Network LP Locker Contract, where the tokens were deposited by the token deployer. The total funds lost in this exit scam amount to 230,455 USD, equivalent to 86.41 WETH.

Deployer Address:

https://etherscan.io/address/0x28eD88c5…BC4DbC

Scammer Address:

https://etherscan.io/address/0xE8478d32…27B348

UNCX Network LP Locker Contract:

https://etherscan.io/address/0x663a5c22…9db214

Liquidity Removal Transactions:

1. https://etherscan.io/tx/0xe984071a…1136b5

2. https://etherscan.io/tx/0x45ce33a3…d54ac1

3. https://etherscan.io/tx/0xc9e5e973…1d0fb7

4. https://etherscan.io/tx/0x3fe425b5…15dd9c

5. https://etherscan.io/tx/0x87ecb8c8…b226ae

Incident Report

Protocol / Project Elongate Deluxe
Date of Incident
Attack Technique Rugpull
Classification Token

Protocol Information

Protocol Type Exit Scam/Rugpull
Affected Token ELongD
Team Anonymous
Source Code Verified On-Chain

What the Attacker Needed to Succeed

Understanding the prerequisites for this type of attack helps auditors identify protocols that are most at risk and helps developers build better defenses.

Technical Knowledge Deep understanding of rugpull and Solidity and EVM internals
Capital Required Seed capital to cover gas and initial position setup
On-Chain Access Ability to interact with smart contracts and deploy a custom exploit contract
Protocol Analysis Identification of the exploitable vulnerability in Elongate Deluxe's contract logic - root cause: token
Execution Speed Precise transaction ordering and timing to exploit the vulnerability within a single atomic block
Obfuscation Plan A strategy to launder and move stolen funds - typically through mixers, cross-chain bridges, or decentralized DEX swaps to resist tracing

What Auditors Should Check

Could this have been caught in audit? Hard to catch — private key / OpSec failures are outside smart contract audit scope

If you're auditing a protocol with similar architecture to Elongate Deluxe, these are the critical security checks that could have prevented this incident (August 2021).

  • Verify all logic paths related to Rugpull are guarded by proper access controls and input validation
  • Review privileged functions (owner, admin, governance) for potential abuse vectors - centralization risks should be documented and bounded with timelocks or multi-sigs

Master these auditing techniques with hands-on labs and real exploit scenarios in the Smart Contract Hacking course.

Free Trial

Learn to Prevent the Next Elongate Deluxe

The Elongate Deluxe hack is one of many attacks that skilled auditors are trained to detect before deployment. Master real exploit patterns and defense techniques with hands-on Web3 security training.

Recreate exploit patterns safely Free Trial