What happened
Flare Token was possibly rugpulled. An EOA address was able to remove funds from the PancakeSwap pool for a total of 17,010,503 $USD after claiming roughly 4,000,000,000 $FLARE tokens from a vault contract.
Flare Token is a BEP20 token trading on PancakeSwap and can't be confused with Flare Network with the $FLR token symbol. An EOA address called a withdrawProfit() function on a contract with an unverified source code and received 3,973,277,600 $FLARE tokens. The part of the claimed tokens was used to perform a swap and drain of liquidity.
The exploiter profited 17,010,503 $USD and transferred funds to another EOA address.
Scammer addresses:
Malicious transaction:
Liquidity drain transaction:
Protocol details
Post-Incident Timeline
-
2022-11-17
On 17 November, an EOA address that received the funds transferred all the stolen amount through TornadoCash.
Evidence
- report Report unchainedpodcast.com
- report @peckshield incident report twitter.com
- report Report mobile.twitter.com
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
