LINEA Hack
Incident Overview
LINEA copycat token was rugpulled, the scammer removed liquidity worth 740,809 USD from UniSwap pool on Oct 25, 2023.
LINEA is a copycat ERC20 token trading on UniSwap and can't be confused with the legitimate project. The deployer manipulated the token price by creating fake transactions and removed liquidity from the UniSwap LP pool, which also served as the token contract. The stolen funds, amounting to 740,809 USD worth 403.89 WETH, were transferred through the Tornado Cash mixer, making the funds difficult to trace.
Deployer Address:
https://etherscan.io/address/0x5Ac6737b…6DAC99
Liquidity Removal Transaction:
https://etherscan.io/tx/0x4ab6ec87…6e4ced
Tornado Cash Deposit Transactions:
https://etherscan.io/tx/0x7969c1a0…b8be03
https://etherscan.io/tx/0xe365eb79…9b1b00
Incident Report
Protocol Information
What the Attacker Needed to Succeed
Understanding the prerequisites for this type of attack helps auditors identify protocols that are most at risk and helps developers build better defenses.
What Auditors Should Check
If you're auditing a protocol with similar architecture to LINEA, these are the critical security checks that could have prevented this incident (October 2023).
- Verify all logic paths related to Rugpull are guarded by proper access controls and input validation
- Review privileged functions (owner, admin, governance) for potential abuse vectors - centralization risks should be documented and bounded with timelocks or multi-sigs
Master these auditing techniques with hands-on labs and real exploit scenarios in the Smart Contract Hacking course.
Free TrialSources & References
Learn to Prevent the Next LINEA
The LINEA hack is one of many attacks that skilled auditors are trained to detect before deployment. Master real exploit patterns and defense techniques with hands-on Web3 security training.