HeroCat Hack

TOTAL LOST $1.2M
Medium Rugpull

What happened

HeroCat's project tokens $HCT and $HCK were rug pulled. Both token lost approx. >90% of their value.

HeroCat is a NFT ecosystem that hosted both the HeroCatToken (HCT) and HeroCatKey (HCK) tokens. $HCT was dumped by the MiningPool contract, which was a team related address. Consequently, the total amount of rug pulled 1,025,532 $BUSD was transferred to an EOA address. $HCK token were dumped by an address, that received tokens from the HeroCat Deployer address, netting the attacker 151,815 $BUSD.

The ill-gotten funds resulting from the selling of both coins were transferred to the same EOA address.

Address of HeroCatKey token:

https://bscscan.com/token/0x032a4e59…1cefa1

Address of HeroCat MiningPool:

https://bscscan.com/address/0x1CAdDd4c…54b110

Address of HeroCat Deployer:

https://bscscan.com/address/0x73112dcd…606f84

Address of HCK dumper:

https://bscscan.com/address/0x6E49ae03…D6A441

Address currently holding rug pulled funds:

https://bscscan.com/address/0x74A12a28…23CF4C

Transaction between deployer and dumper:

https://bscscan.com/tx/0x4159880b…766d50

Transactions transferred drained funds:

https://bscscan.com/tx/0xcd5be406…e4367d

https://bscscan.com/tx/0xe2c952dc…eac429

0x81d3ec77438b4e99aa99ba25b1dbc3fea317fe3b0x81d3ec77438b4e99aa99ba25b1dbc3fea317fe3b

Case & protocol details

Classification NFT,Token
Protocol Type Exit Scam/Rugpull
Affected asset / contract HCT

Evidence & learning

Sources and on-chain records

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.