HeroCat Rug Pull

Reported loss $1.2M
Rugpull

What happened

HeroCat's project tokens $HCT and $HCK were rug pulled. Both token lost approx. >90% of their value.

HeroCat is a NFT ecosystem that hosted both the HeroCatToken (HCT) and HeroCatKey (HCK) tokens. $HCT was dumped by the MiningPool contract, which was a team related address. Consequently, the total amount of rug pulled 1,025,532 $BUSD was transferred to an EOA address. $HCK token were dumped by an address, that received tokens from the HeroCat Deployer address, netting the attacker 151,815 $BUSD.

The ill-gotten funds resulting from the selling of both coins were transferred to the same EOA address.

Address of HeroCatKey token:

Token

Address of HeroCat MiningPool:

Address 0x1CAd…b110

Address of HeroCat Deployer:

Address 0x7311…6f84

Address of HCK dumper:

Address 0x6E49…A441

Address currently holding rug pulled funds:

Address 0x74A1…CF4C

Transaction between deployer and dumper:

Tx 0x4159…6d50

Transactions transferred drained funds:

Tx 0xcd5b…367d

Tx 0xe2c9…c429

0x81d3ec77…17fe3b

Protocol details

Classification NFT / Token
Protocol Type Exit Scam/Rugpull
Affected asset / contract HCT

Evidence

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.