Kokomo Finance Hack

Kokomo Finance was rugpulled for 4,163,392 $USD. Project's social media was removed after an exit scam.

Kokomo Finance is a Lending and Borrowing Protocol running on a layer-2 Optimism chain. $KOKO token deployer conducted malicious actions and drained 4,163,392 $USD worth of assets from various pools. 3,967,779 $USD worth 141 $WBTC was drained after the implementation of the cBTC contract was changed and 7,000 $soWBTC was siphoned out to another EOA address and then swapped to $WTBC.

All the stolen funds this way were transferred through EOA addresses. The rest 195,613 $USD worth of $ETH was drained from KOKO/WETH UniSwap pool by the deployer-related address and almost all of the amount currently stay at the drainer's original address. Project-related social media accounts were removed shortly after an incident.

Scammer addresses:

https://optimistic.etherscan.io/address/0x41be327a…b3310f

https://optimistic.etherscan.io/address/0x5a2d0e3d…0f5716

https://optimistic.etherscan.io/address/0x5c8db6ee…cf7bff

KOKO pool drainer address:

https://optimistic.etherscan.io/address/0xe06b252d…e82f8e

Malicious transactions:

https://optimistic.etherscan.io/tx/0xd751d8b9…b6f20b

https://optimistic.etherscan.io/tx/0x728b3f1d…3da67e