ElonMVP Hack

The $ElonMVP token was rugpulled by its project deployer. The scammer received a profit of 170 $BNB. The scammers decided to launder the ill-gotten funds through tornado.cash's mixing service.

Tornado.cash mixes various ERC-20 Token and ETH into a lockbox. Through "zero knowledge proof" a user that deposits funds into a lockbox is provided with a unique key. Once the user decides to withdraw the funds, a proof of possession of the key in a hashed form is required. This process enables the transfer of funds without the disclosure of the users identity.

The $ElonMVP project deployers wallet should have raised alert amongst the community from its inception. Reason was that the project deployer's address was funded from an address which was initially funded through tornado.cash, which can be seen in this transaction: https://bscscan.com/address/0xbf66c21f…44ee37#internaltx.

EOA wallet 0xbf66c funded a number of wallets and amongst it 0xbf66c funded the wallet of $ELONMVP's project deployer with $BNB 12 as can be seen  in the example transaction: https://bscscan.com/tx/0xad1d3a78…fbc2f6.

The creator of the token created a liquidity pool between ElonMVP/BNB tokens, where $300 BNB was invested in these transactions:

1. Tx
2. Tx

Again the funds used to bootstrap the liquidity stemmed from Tornado.Cash;

https://bscscan.com/address/0xdd65cb76…93bdf6#internaltx.

Once the project gained traction, the project deployer removed the liquidity by taking a profit of ~$170 BNB: https://bscscan.com/tx/0x67f92de2…53b128

All the tokens were transferred to the scammer address (C) in this transaction: https://bscscan.com/tx/0xe1513999…6b82bf

Subsequently, all the funds were laundered via Tornado.Cash.

As the time of this writing information on this case is scarce. More sources will be added if the case should develop.

Involved addresses:

Token creator, scammer address(A): https://bscscan.com/address/0xdd65cb76…93bdf6

Scammer address (B): https://bscscan.com/address/0xbf66c21f…44ee37

Scammer address (C): https://bscscan.com/address/0x88795b97…d3ef38