What happened
The lack of validation of assets in the swap function contributed to the attacker taking advantage of this vulnerability, and to pull off a flash loan attack.
Attacker address (BSC): Address 0x73b3…fF7C
Attacker address (ETH): Address 0x73b3…fF7C
Attacker contract address (BSC): Address 0x9a84…f445
Attacker contract address (ETH):Address 0x9a84…f445
One of the attacker transaction on BSC: Tx 0xe4b0…355b
Attacker transaction on ETH: Tx 0x03bd…188f
Total losses: $1.5M
Protocol details
Evidence
- report Report fegtoken.com
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
