What happened
According to the pinned message in the project's announcement channel on Telegram, the project team was holding a pre-sale event at that moment:
https://archive.is/BTpkP, where funds receiver was this Presale smart contract:
https://bscscan.com/address/0x354f675d…6b4d92
Presale smart contract transferred raised funds to the final recipient - the contract deployer wallet. This fact can be verified by the transaction list from 21.01.2021 (start of the presale event):
https://explorer.bitquery.io/bsc/txs/transfers?currency=BNB&receiver=0x8375f77e…4c2073
The contract deployer distributed stolen funds between some external wallets at the following transactions:
https://bscscan.com/tx/0x37788e98…bbb213
https://bscscan.com/tx/0x464dadcd…607044
https://bscscan.com/tx/0x29165ba9…3abc47
https://bscscan.com/tx/0xe01f160d…6a4453
https://bscscan.com/tx/0xf77e1e60…917896
https://bscscan.com/tx/0x94f97112…6a14e3
https://bscscan.com/tx/0xa0ae88a0…3f4716
https://bscscan.com/tx/0x8721007c…8fb22f
Case & protocol details
Evidence & learning
Sources and on-chain records
- report Report twitter.com
- analysis Web Archive web.archive.org
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.