iSharesBitcoin Hack
What happened
IBTC token project was rugpulled by the deployer after removing liquidity worth 87,947 USD from PancakeSwap pool.
IBTC is a BEP20 token trading on PancakeSwap. On Oct 26, 2023, the deployer and scammer sent funds from Binance to their addresses. It is assumed that the deployer created the contract in a way that allowed it to be hacked later.
The scammer (0xf4956850…9c5B37) minted a significantly larger number of tokens and then rug pulled by selling 1,000,000,000,000,000 IBTC, completely depleting the liquidity pool. The stolen funds were transferred to another EOA and then distributed between multiple addresses, resulting in a total loss of 87,947 USD worth 394.76 WBNB.
Deployer Address:
https://bscscan.com/address/0xc3295049…918Ed9
Scammers Addresses:
https://bscscan.com/address/0xf4956850…9c5B37
https://bscscan.com/address/0x3f04768E…c704ED
https://bscscan.com/address/0x336dd91C…9ABb11
Token Swap Transaction:
https://bscscan.com/tx/0x8a92789d…da0341
Funds sending from the Binance exchange Transaction:
https://bscscan.com/tx/0xd70007a6…195e94
Case & protocol details
Evidence & learning
Sources and on-chain records
- report Report twitter.com
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.