Growth DeFi Hack

The attacker's address:

https://etherscan.io/address/0x5e05bc89…21a04b

The attacker created a fake token called AXZ and supplied rAXZZ/GRO liquidity. He then staked it in the contract and pulled out the other pair.

The attacker:

- swapped 0.001 WETH for ~0.0148 GRO:

https://etherscan.io/tx/0x97373e45…b304b5

- added ~0.0148 GRO and 100,000,000,000 AXXZ into Uniswap liquidity pair:

https://etherscan.io/tx/0xa94c42b8…ea6247

- removed ~27,516 GRO and ~1,218 rAAVE liquidity from Uniswap:

https://etherscan.io/tx/0x2152214a…a41a23

- swapped ~27,516 GRO for ~597 WETH and ~1,218 rAAVE on ~203 WETH:

https://etherscan.io/tx/0xffef18b3…96797f

https://etherscan.io/tx/0xce020fab…757998

Stolen funds were distributed between 4 external wallets at:

https://etherscan.io/tx/0x0a6b5c92…f817eb

https://etherscan.io/tx/0xac4407bf…2ec2b4

https://etherscan.io/tx/0x0391fa91…ece735

https://etherscan.io/tx/0xb80894d7…9b680c