What happened
The attacker's address:
https://etherscan.io/address/0xa8189407…f55908
The transactions behind the attack :
https://etherscan.io/tx/0x713c2ce2…9bf069
https://bscscan.com/tx/0xdf719d25…cc3387
https://hecoinfo.com/tx/0xecde0b38…366438
The attacker used a bug in the calculations that are different from Uniswap. Due to fact that all tokens sit in one contract, he escalated it by:
- adding two fake tokens
- adding liquidity between both tokens and WETH/fake token
- swapping between UNI/WETH/fake tokens
- removing liquidity
Total funds were stolen:
- 80 ETH (Ethereum)
- 10,000 DAI (Ethereum)
- 45,000 USDT (HECO)
Stolen funds were deposited into Tornado Cash mixer:
https://bloxy.info/txs/calls_from/0xa8189407…f55908?signature_id=994162&smart_contract_address_bin=0x722122df…5b6967
Case & protocol details
Evidence & learning
Attack pattern
Compare incidents →Sources and on-chain records
- report Report sashimisashimi5.medium.com
- report Report twitter.com
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.