PolyButterfly Rug Pull

Reported loss $1.5M
Polygon
Rugpull

What happened

The contract deployer changed the ownership of the MasterChef contract to the malicious one:

Tx 0x0d78…56f0

The contract deployer removed funds from the MasterChef contract at:

Tx 0x35a8…c563

Stolen funds were sold on ETH.

Protocol details

Classification Yield Aggregator / Exchange (DEX) / Borrowing and Lending
Protocol Type Exit Scam/Rugpull
Affected asset / contract POLLEN

Evidence

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.