Incident Overview
The $SpaceGodzilla token has been subjected to a Flash Loan Attack. During this attack, the attacker made a profit of more than $26K.
The $SpaceGodzilla token was exposed to the flash loan attack. During the analysis of transactions, the course of the attack was revealed. The attacker borrowed flash loans for $USDT, which he then exchanged for $SpaceGodzilla to raise its value. Then the attacker calls the swapAndLiquifyStepv1() function, which invests both $USDT and $SpaceGodzilla in an unbalanced pool, as a result of which he can exchange the $SpaceGodzilla token for $USDT. Ultimately, the attacker repays the loans and takes a profit of $26k. $25k was transferred to scammer's contract address (https://bscscan.com/tx/0xa74e446a…c13f4e)
As the time of this writing information on this case is scarce. More sources will be added if the case should develop.
Exploiter address: https://bscscan.com/address/0x00a62eb0…e57e57
Exploiter contract addresses:
1) https://bscscan.com/address/0x3d817ea7…8dcd72
2) https://bscscan.com/address/0x05ad60d9…bea16f
Exploit transactions:
1) https://bscscan.com/tx/0x7f183df1…b4cca4
2) https://bscscan.com/tx/0x67ba949a…81bdeb
Incident Report
Protocol Information
What the Attacker Needed to Succeed
Understanding the prerequisites for this type of attack helps auditors identify protocols that are most at risk and helps developers build better defenses.
What Auditors Should Check
If you're auditing a protocol with similar architecture to Space Godzilla, these are the critical security checks that could have prevented this incident (July 2022).
- Verify all logic paths related to Flash Loan Attack are guarded by proper access controls and input validation - see the Flash Loans Attacks attack class for patterns
- Review privileged functions (owner, admin, governance) for potential abuse vectors - centralization risks should be documented and bounded with timelocks or multi-sigs
Master these auditing techniques with hands-on labs and real exploit scenarios in the Smart Contract Hacking course.
Free TrialRelated Attack Classes
The technique used in this hack maps to these vulnerability classes in our security curriculum:
Sources & References
Learn to Prevent the Next Space Godzilla
The Space Godzilla hack is one of many attacks that skilled auditors are trained to detect before deployment. Master real exploit patterns and defense techniques with hands-on Web3 security training.