What happened
The address behind the exit scam:
This address, marked as Phishing, got an unlimited allowance for transferring users' LP tokens from the Master Chef contract. The phishing address has withdrawn LP tokens onto his wallet by calling transferFrom() function into the Master Chef contract at:
The liquidity was removed multiple times by the Phishing address at:
Stolen funds are still holding on to the Phishing address.
Technical root cause
Unlimited allowance
Protocol details
Classification
Exchange (DEX)
Protocol Type
Exit Scam/Rugpull
Affected asset / contract
POPCORN
Protocol links
Website
@SwapPopcorn
Evidence
- report Report bsc.news
- analysis Web Archive web.archive.org
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
