Fintoch Hack

TOTAL LOST $31.7M
High Rugpull

What happened

The Fintoch team performed a rug pull on May 22, on the Binance Smart Chain resulting in losses of about 31,666,317 USDT.

The DFintoch project deployed the FintochSTO contract using the deployer address 0x8a0deffb…49aa63. During deployment, 100,000 FTH tokens were minted. These tokens were then sent to address 0xfce4d. However, on the May-22-2023, a transfer of 34,341 FTH tokens was made from 0xfce4d to address 0xec1a.

Following that, 20,000 FTH tokens were swapped for 31,666,317 USDT using the "swapForUSDT()" function on the contract with address 0x19a00e35…4bb5f7.

The funds were subsequently moved to address 0x398dcb3e…ebacf4. Multichain and SWFT were utilized for the bridging of funds.

Transaction deploying FintochSTO contract: https://bscscan.com/tx/0x3ef479ba…87fce6

Transaction transferring 34,341 FTH to address 0xec1a: https://bscscan.com/tx/0xee053bf3…f004d6

SwapTx:

https://bscscan.com/tx/0xa5e64161…1c7ea2

Case & protocol details

Classification Token,Other
Protocol Type Exit Scam/Rugpull
Affected asset / contract FTH
Official Website www.fintoch.com/
Protocol Twitter/X @DFintoch

Evidence & learning

Sources and on-chain records

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.