What happened
Quick Summary
Flashmall project was rugpulled with stolen funds worth 508,350 $USD bridged to Ethereum via Celer Bridge.
Details of the Exploit
Flashmall is a project on the Binance Smart Chain. A privileged address set by the project manipulated a function to mint 10 times the tokens every time and then swap back tokens 1:1, finally removing liquidity to profit around 508,350 $USD. Part of these stolen funds was bridged to Ethereum via Celer Bridge and consequently transferred through TornadoCash as 200 BNB and 250 ETH.
Block Data Reference
Scammer Address:
TornadoCash Transfers on BSC:
Protocol details
Classification
Token
Protocol Type
Exit Scam/Rugpull
Evidence
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
