What happened
RedRubyDAO project was exploited, the attacker used a smart contract deployment to receive 85,000,000 tokens and sold them in the same transaction.
RRD is a BEP20 token of the RedRubyDAO project. The liquidity pool of the token is located on the W3Swap. The hacker deployed a malicious smart contract and transferred 85,000,000 $RRD tokens to the contract balance.
Consequently, the hacker swapped 83,300,000 $RRD on W3swap and received 91,000 $BUSD in the same transaction. The remaining $RRD tokens were transferred to two EOA addresses. The stolen funds stay in the hacker's address at the moment.
Attacker address:
Malicious contract:
Malicious transaction:
Liquidity pool:
Protocol details
Evidence
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
