Impossible Finance Hack
What happened
The attacker's address:
https://bscscan.com/address/0x8e0d334a…72ef02
The transactions behind the attack:
https://explorer.bitquery.io/bsc/txs/calls?internal=false&contract=0xc7ca5478…aa11e6&method=641ccd83
The attacker:
- borrowed 233.3 BNB of flash loan from PancakeSwap
- swapped 65,140 IF tokens
- created a fake token called AAA (BBB)
https://bscscan.com/token/0x9892dd7a…8dac74
- created LP with the fake token and IF token
- swapped 32,570 IF into 221,898 BUSD and another 32,570 IF into 221,898 BUSD using IF router through the FAKE token LP
- repeated the steps from 3 to 5
- sold 556,384 BUSD for 1,731 BNB, repaid the flash loan.
Stolen funds were bridged into Ethereum mainnet onto this address:
https://etherscan.io/address/0x8e0d334a…72ef02
The further destination is unknown.
There are transactions where the Impossible Finance hacker is transferring BNB tokens, which were used to perform a flash loan into the Impossible Finance deployer's address at:
https://bscscan.com/tx/0x05d962a8…dcb244
https://bscscan.com/tx/0x487403ee…6edbb1
In addition:
- Impossible Finance exploiter into 0x6b3 (849.2 BNB):
https://bscscan.com/tx/0x7104c2c1…235eff
- 0x6b3 into Eleven Finance deployer (849 BNB):
https://bscscan.com/tx/0xb70cb9da…6ee4f1
The further funds' flow as follows:
1. Deployer into Gnosis Safe Proxy:
https://bscscan.com/tx/0x48ccb426…01e644
https://bscscan.com/tx/0x1384c22d…d245ec
2. Gnosis Safe Proxy into 0x22b (1,000 BNB):
https://bscscan.com/tx/0xfdb6fec8…a56c96
2.1 Gnosis Safe Proxy into 0x1Cc (521 BNB):
https://bscscan.com/tx/0x63d7b8fd…412e80 (Still on the balance)
3. 0x22b into 0x736 (900 BNB):
https://bscscan.com/tx/0xdb8860fc…bc4941
3.1 0x736 into Disperse (674.35 BNB):
https://bscscan.com/tx/0xf912b616…08c010
https://bscscan.com/tx/0xe705db37…b57776
3.2 0x736 added liquidity into pair WBNB / IF (225 BNB):
https://bscscan.com/tx/0xedcd98a1…e98833
https://bscscan.com/tx/0x3c8de03c…9b772c
https://bscscan.com/tx/0xb9389fce…864f57
4. 0x22b into 0x1Cc (451 BNB):
https://bscscan.com/tx/0xc2484e4e…0fe5fd
https://bscscan.com/tx/0xf984147f…7298c0
4.1 0x1Cc into Binance How wallet (450.99 BNB):
https://bscscan.com/tx/0xf3cef212…a4ebc3
Case & protocol details
Evidence & learning
Sources and on-chain records
- report Post-mortem medium.com
- report Report watchpug.medium.com
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.