Kokomo Finance Rug Pull
What happened
Kokomo Finance was rugpulled for 4,163,392 $USD. Project's social media was removed after an exit scam.
Kokomo Finance is a Lending and Borrowing Protocol running on a layer-2 Optimism chain. $KOKO token deployer conducted malicious actions and drained 4,163,392 $USD worth of assets from various pools. 3,967,779 $USD worth 141 $WBTC was drained after the implementation of the cBTC contract was changed and 7,000 $soWBTC was siphoned out to another EOA address and then swapped to $WTBC.
All the stolen funds this way were transferred through EOA addresses. The rest 195,613 $USD worth of $ETH was drained from KOKO/WETH UniSwap pool by the deployer-related address and almost all of the amount currently stay at the drainer's original address. Project-related social media accounts were removed shortly after an incident.
Scammer addresses:
KOKO pool drainer address:
Malicious transactions:
Protocol details
Security review history
- 0xGuard View report
Evidence
- report @CertiKAlert incident report x.com
- report @CertiKAlert incident report twitter.com
- analysis Website reference coindesk.com
- analysis DeFiLlama defillama.com
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.