Flashmall Hack

TOTAL LOST $508K
Low Rugpull

What happened

Quick Summary

Flashmall project was rugpulled with stolen funds worth 508,350 $USD bridged to Ethereum via Celer Bridge.

Details of the Exploit

Flashmall is a project on the Binance Smart Chain. A privileged address set by the project manipulated a function to mint 10 times the tokens every time and then swap back tokens 1:1, finally removing liquidity to profit around 508,350 $USD. Part of these stolen funds was bridged to Ethereum via Celer Bridge and consequently transferred through TornadoCash as 200 BNB and 250 ETH.

Block Data Reference

Scammer Address:

https://bscscan.com/address/0x613C6F06…23193A

TornadoCash Transfers on BSC:

https://bscscan.com/tx/0x6ade5d00…ac88da

https://bscscan.com/tx/0xda59ad2c…a082bd

Case & protocol details

Classification Token
Protocol Type Exit Scam/Rugpull

Evidence & learning

Sources and on-chain records

Browse all hacks

Other incidents recorded with the same attack technique.

Pepe Trump $38K
NYC Memecoin $3.4M
OracleBNB $80K
Aqua $4.7M

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes