Merlin Labs Hack

The attacker:

Address 0x400f…62fa

The transaction behind the attack:

Tx 0x8e20…ff97

The attacker:

• Added a small sum of deposit to the LINK-BNB Vault at:

Tx 0x3ce0…75ac

• Sent 180 CAKE to the LINK-BNB Vault contract (leads to the hack)
• Called getReward() with the deposit of LINK-BNB Vault from the first step
• With a large amount of CAKE token in the wallet balance of the vault contract (sent by the hacker in step 2), it returns a large amount of profit. As a result, the system minted 100 MERL as a reward to the hacker
• Repeated 36 times, received 49K of MERL token in total
• Swapped MERLIN token into 240 ETH and transferred out of BSC using Anyswap.

The attack was performed using a similar way as Bunny and Autoshark exploits.