PlantWorld Hack

PlantWorld was exploited by a flash loan attack. The hacker profited for 24483 $USD.

PlantWorld is BEP20 token trading on PancakeSwap and can't be confused with other tokens with the same PLTD symbol. The attacker took 666,000 $BUSD as a flash loan and bought 1,570,000 $PLTD tokens using a smart contract with an unverified source code. Consequently, $PLTD tokens were used to manipulate inner variables and a large amount of additional $PLTD was used to drain the liquidity from the Pancake pool.

The attacker was able to withdraw 690,000 $BUSD and profited for 24,483 $BUSD.

Attacker address:

https://bscscan.com/address/0x6ded5927…e93c5b

Malicious contract:

https://bscscan.com/address/0x83797825…d48b49

Malicious transaction:

https://bscscan.com/tx/0x8385625e…0dafe0