What happened
Harvest Keeper was rugpulled via privileged function. 929,595 $USD were stolen in total across three chains.
Harvest Keeper claimed to be an AI-powered trading platform running on Binance, Ethereum, and Polygon chains. The platform was rugpulled by the contract owner via the privileged function getAmount(). The function allowed the contract owner to drain all remaining $USDT from the project's contract.
710,595 $USDT was siphoned out in a single transaction this way. 219,000 $USD worth of assets were stolen via ice phishing and then exploiting user approvals across Binance, Ethereum, and Polygon chains in addition. All the stolen funds were transferred through multiple EOA addresses.
Attacker addresses:
Malicious transaction:
Approval exploits transaction example:
Protocol details
Evidence
- report Report beincrypto.com
- report @CertiKAlert incident report twitter.com
- analysis DeFiLlama defillama.com
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
