Sloth Climb Hack

TOTAL LOST $94K
Low Rugpull

What happened

Quick Summary

Sloth Climb project rugpulled by EOA address which removed liquidity worth 93,531 $USD

Details of the Exploit

Sloth Climb is a BEP20 token trading on PancakeSwap. The token can't be confused with other tokens with the same symbol or name. Its liquidity pool was drained after an EOA address called removeLiquidityETH() function to withdraw all available funds in the amount of 93,531 $USD.

The attacker address took LP tokens from LockService contract, which was deployed by the token deployer. The attacker then transferred stolen funds through Stargate Bridge.

Block Data Reference

Scammer Address:

https://bscscan.com/address/0xe9b7dec3…88aa52

Vault contract:

https://bscscan.com/address/0x624bf9c8…1e2eef

Liquidity Drain Transaction:

https://bscscan.com/tx/0xf4d483a2…454c83

Case & protocol details

Classification Token
Protocol Type Exit Scam/Rugpull
Affected asset / contract SLOTH

Evidence & learning

Sources and on-chain records

Browse all hacks

Other incidents recorded with the same attack technique.

Pepe Trump $38K
NYC Memecoin $3.4M
OracleBNB $80K
Aqua $4.7M

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes