Solid Protocol Hack
Incident Overview
On LinkedIn, the project team created accounts with fictitious images and identities.
The contract deployer distributed tokens in big amounts between external wallets at:
https://etherscan.io/tx/0x83dfa98a…0dd868
https://etherscan.io/tx/0x64797cdc…e548a4
https://etherscan.io/tx/0xb8fa1eff…1212b0
https://etherscan.io/tx/0xa20c511b…e7eb52
https://etherscan.io/tx/0xaf70f4b3…edafe2
One from the recipients added initial liquidity at:
https://etherscan.io/tx/0xb875065e…7e2452
The other addresses started selling tokens in multiple transactions, for example:
https://etherscan.io/tx/0xc5e5f42d…6db17d
https://etherscan.io/tx/0x923bb84b…6ed103
https://etherscan.io/tx/0x494cf90d…2d263e
https://etherscan.io/tx/0x040b78ab…18a1cf
The liquidity was removed by the external address at:
https://etherscan.io/tx/0x25c58351…4094b7
https://etherscan.io/tx/0xeb822c02…7daccb
Incident Report
Protocol Information
What the Attacker Needed to Succeed
Understanding the prerequisites for this type of attack helps auditors identify protocols that are most at risk and helps developers build better defenses.
What Auditors Should Check
If you're auditing a protocol with similar architecture to Solid Protocol, these are the critical security checks that could have prevented this incident (December 2020).
- Verify all logic paths related to Rugpull are guarded by proper access controls and input validation
- Review privileged functions (owner, admin, governance) for potential abuse vectors - centralization risks should be documented and bounded with timelocks or multi-sigs
Master these auditing techniques with hands-on labs and real exploit scenarios in the Smart Contract Hacking course.
Free TrialSources & References
- 01
-
02
de.fi Analysis https://t.me/defiyield_ann/336
Learn to Prevent the Next Solid Protocol
The Solid Protocol hack is one of many attacks that skilled auditors are trained to detect before deployment. Master real exploit patterns and defense techniques with hands-on Web3 security training.