NeedForSpeed Finance Hack
What happened
Custom ERC20 Standard with malicious logic which allows blocking token transferring.
The project was holding a fundraising event using Token Sale smart contract:
https://etherscan.io/address/0x21c76e2a…18d0b0#code
The funds gathered from the token sale were transferred to the contract deployer:
https://etherscan.io/tx/0x4f71d08f…1f8d0a
All 125 ETH was used to add the initial liquidity at:
https://etherscan.io/tx/0x1286d6c6…2fc01a
https://etherscan.io/tx/0xfbe58652…9c472e
https://etherscan.io/tx/0x2f5a1600…14ea6f
The liquidity was removed by the contract deployer:
https://etherscan.io/tx/0x8ecb6bd2…09de99
https://etherscan.io/tx/0x874091d6…d34124
https://etherscan.io/tx/0x2775cd7f…9cb262
Case & protocol details
Evidence & learning
Sources and on-chain records
- report Report needforspeed.finance
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.