Incident Overview
Sheep Farm on-chain gaming dapp was exploited due to smart contract vulnerability. 91,320 $USD worth of $BNB was stolen from the project.
Details of the Blockchain
Sheep Farm is a GameFi dapp on the Binance chain. The project was exploited due to smart contract vulnerability, which allowed the attacker to register multiple times and increase the amount of owned gems using a deployed smart contract with unverified source code. 309 $BNB was stolen from the project's smart contract, which is valued at 91,320 $USD at the moment. All the stolen funds were transferred through TornadoCash.
Attacker address:
https://bscscan.com/address/0x2131c67e…edd049
Malicious contract:
https://bscscan.com/address/0xf2db8665…ec6bbc
Malicious transaction example:
https://bscscan.com/tx/0x8b3e0e3e…c72f1c
Incident Report
Protocol Information
What the Attacker Needed to Succeed
Understanding the prerequisites for this type of attack helps auditors identify protocols that are most at risk and helps developers build better defenses.
What Auditors Should Check
If you're auditing a protocol with similar architecture to Sheep Farm, these are the critical security checks that could have prevented this incident (November 2022).
- Verify all logic paths related to Other are guarded by proper access controls and input validation
- Review privileged functions (owner, admin, governance) for potential abuse vectors - centralization risks should be documented and bounded with timelocks or multi-sigs
Master these auditing techniques with hands-on labs and real exploit scenarios in the Smart Contract Hacking course.
Free TrialSources & References
Learn to Prevent the Next Sheep Farm
The Sheep Farm hack is one of many attacks that skilled auditors are trained to detect before deployment. Master real exploit patterns and defense techniques with hands-on Web3 security training.