Ordinals Finance Hack

Ordinals Finance was rugpulled by the token deployer and two related addresses for 1,015,192 $USD.

Ordinals Finance is a project that claimed it would build a protocol for developing decentralized finance (DeFi) applications on Bitcoin. However, this claim was false since the project used Ethereum to create its native $OFI token. The rugpull happened on the Ethereum chain where funds worth 1,015,192 $USD have been stolen.

The deployer withdrew $OFI tokens from the OFIStaking contract using a privileged function and swapped claimed tokens for $WETH before consolidating funds into one account under their control with the newly deployed OEBlock Token also being used in the attack.

Two deployer-related EOA addresses were identified as accomplices in draining WETH/OFI UniswapV2 pools using $OFI tokens while transferring 551 $ETH to TornadoCash.

Scammer Address:

https://etherscan.io/address/0x905bb314…fc7f6e

Related EOA addresses:

https://etherscan.io/address/0xa14AdAA4…591550

https://etherscan.io/address/0x524570E6…fa058a

Malicious Transactions:

Deployer Liquidity Removal Transaction:

https://etherscan.io/tx/0xe513b843…85694c

EOA Liquidity Removal Transaction Example:

https://etherscan.io/tx/0xaaabf697…d0775d

TornadoCash Transfer Transaction Example:

https://etherscan.io/tx/0xc6b60395…6ae46b