Poolz Finance Hack

Reported loss $443K
BNB Chain
Other

What happened

Poolz Finance was exploited for 443,439 $USD. The hacker exploited overflow vulnerability to receive assets from the project's vault contract.

Poolz Finance is a launchpad running on Binance and Polygon chains. The project was exploited via overflow vulnerability. The LockedDeal vault contract of the platform was exploited, which caused the $POOLZ token price to drop by more than 95%.

The attacker was able to receive various tokens, after draining the vault contract, and exchanged them for 443,439 $USD worth of $BNB. All the stolen funds remain at the attacker's original address at the moment.

Attacker address:

Address 0x190c…ef2a

Malicious contract:

Address 0x058b…2203

Malicious transaction:

Tx 0x4635…45ff

Protocol details

Classification Other / Token & Share Accounting
Protocol Type Farm
Affected asset / contract POOLZ
Implementation language Solidity
Protocol links Website @Poolz__

Post-Incident Timeline

  • 2023-03-16

    Poolz Finance announced on their Twitter about restructuring the platform, and the new $POOLX token deployment. The team recommended not to trade the $POOLZ tokens anymore.

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.