MangoFarmSol Rug Pull

Reported loss $2.0M
Solana
Frontend Attack

What happened

MangoFarmSOL exit scammed, stealing 1,297,344 USD worth of SOL (13,514 tokens) from users and deleting their website and Twitter account.

MangoFarmSOL, a yield farming protocol on the Solana blockchain, encouraged users to deposit Solana tokens into the protocol to earn airdrops. On January 6, 2024, the project conducted an exit scam, withdrawing a total of 13,514 SOL tokens (worth around 1.29 million USD) deposited by users. The stolen funds primarily consisted of SOL tokens, which were then laundered through various channels, first bridging to the Ethereum network via wormhole and allbridge and then deposited into platforms such as Railgun and eXch.

The acquired USDC was bridged from the Solana network to Ethereum via the wormhole bridge. The project subsequently deleted their website and Twitter account.

Scammer Address:

Address FLq2GE…kYbH

Additional Scammer Addresses:

Address 8ggviF…jND7

Address 8FNFfU…dGW6

Funds Withdraw Transaction:

Tx 2HFZyg…cLK9

Tx nod1Vc…oLJK

eXch, Railgun Deposit Transaction:

Tx 0xe290…3d17

Tx 0xe21d…c5dd

Protocol details

Classification Rugpull / Yield Aggregator
Protocol Type Exit Scam/Rugpull
Implementation language Rust
Protocol links Website @MangoFarmSOL

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.