What happened
Quick Summary
FCS Token was rugged by the protocol MasterChefs' owner. The scammer's profit is 2,588,000 $USD.
Details of the Exploit
The MasterChef contract contains a backdoor for withdrawing reward token FCS withdrawSushiReward(address recipient, uint256 amount). This function was executed by the contract owner on Jan-04-2023. Then FCS tokens were swapped to FUT tokens and then to USDT.
Currently, all USDT tokens sit in one of the scammers' addresses.
Block Data Reference
Rug TX:
Owner address:
USDT tokens were transferred to the address:
Protocol details
Classification
Token
Protocol Type
Exit Scam/Rugpull
Affected asset / contract
FCS
Evidence
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
