Pump Farm Hack

The contract deployer interacted with the 3rd party malicious unverified smart contract that received infinite approval for spending the user's approved tokens. He invoked the setMigrator() function at the following transaction:

https://etherscan.io/tx/0xcacef01f…b30864

This contract called migrate() function multiple times. Example transaction:

https://etherscan.io/tx/0x88e788af…42c164

Migrated LP tokens were removed from the liquidity pool at:

https://etherscan.io/tx/0xeb99cfe7…5d3bfe

In addition, the contract deployer has minted 10q PPF tokens onto his wallet:

https://etherscan.Io/tx/0xa7ca31db…699d77

After, 1 billion PPF tokens were exchanged for 220.60 WETH:

https://etherscan.io/tx/0x6d455a00…02c483

Stolen funds were deposited to the Tornado Cash at these 8 transactions to cover up the tracks:

https://etherscan.io/address/0x0ef1a03c…fe1eaa