HeroCat Hack
What happened
HeroCat's project tokens $HCT and $HCK were rug pulled. Both token lost approx. >90% of their value.
HeroCat is a NFT ecosystem that hosted both the HeroCatToken (HCT) and HeroCatKey (HCK) tokens. $HCT was dumped by the MiningPool contract, which was a team related address. Consequently, the total amount of rug pulled 1,025,532 $BUSD was transferred to an EOA address. $HCK token were dumped by an address, that received tokens from the HeroCat Deployer address, netting the attacker 151,815 $BUSD.
The ill-gotten funds resulting from the selling of both coins were transferred to the same EOA address.
Address of HeroCatKey token:
https://bscscan.com/token/0x032a4e59…1cefa1
Address of HeroCat MiningPool:
https://bscscan.com/address/0x1CAdDd4c…54b110
Address of HeroCat Deployer:
https://bscscan.com/address/0x73112dcd…606f84
Address of HCK dumper:
https://bscscan.com/address/0x6E49ae03…D6A441
Address currently holding rug pulled funds:
https://bscscan.com/address/0x74A12a28…23CF4C
Transaction between deployer and dumper:
https://bscscan.com/tx/0x4159880b…766d50
Transactions transferred drained funds:
https://bscscan.com/tx/0xcd5be406…e4367d
https://bscscan.com/tx/0xe2c952dc…eac429
0x81d3ec77438b4e99aa99ba25b1dbc3fea317fe3b0x81d3ec77438b4e99aa99ba25b1dbc3fea317fe3b
Case & protocol details
Evidence & learning
Sources and on-chain records
- report Report archive.is
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.