Fintoch Hack
What happened
The Fintoch team performed a rug pull on May 22, on the Binance Smart Chain resulting in losses of about 31,666,317 USDT.
The DFintoch project deployed the FintochSTO contract using the deployer address 0x8a0deffb…49aa63. During deployment, 100,000 FTH tokens were minted. These tokens were then sent to address 0xfce4d. However, on the May-22-2023, a transfer of 34,341 FTH tokens was made from 0xfce4d to address 0xec1a.
Following that, 20,000 FTH tokens were swapped for 31,666,317 USDT using the "swapForUSDT()" function on the contract with address 0x19a00e35…4bb5f7.
The funds were subsequently moved to address 0x398dcb3e…ebacf4. Multichain and SWFT were utilized for the bridging of funds.
Transaction deploying FintochSTO contract: https://bscscan.com/tx/0x3ef479ba…87fce6
Transaction transferring 34,341 FTH to address 0xec1a: https://bscscan.com/tx/0xee053bf3…f004d6
SwapTx:
https://bscscan.com/tx/0xa5e64161…1c7ea2
Case & protocol details
Evidence & learning
Sources and on-chain records
- report Report cointelegraph.com
- report Report twitter.com
- analysis Web Archive archive.ph
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.