Stanley the Bugman Hack
What happened
BUGMAN token rugpulled by deployer, removing 159,039 USD worth of liquidity from UniSwap pool, funds partially laundered through TornadoCash.
BUGMAN, an ERC20 token trading on UniSwap, experienced an exit scam on Oct 03, 2023. The deployer removed 96,83 WETH, equivalent to 159,039 USD, from the liquidity pool. Approximately 18 hours passed between adding and removing liquidity.
Half of the stolen funds were transferred to another EOA and then deposited into TornadoCash. The remaining half of the funds, still worth 49,67 ETH, are held in the scammer's wallet.
Deployer Address:
https://etherscan.io/address/0x0acc2e47…26cE79
Scammer Address:
https://etherscan.io/address/0xe697EAb7…d4Ac8a
Liquidity Removal Transaction:
https://etherscan.io/tx/0x8fc1a474…8b0a8f
Funds Holder as of Oct 3, 2023:
https://etherscan.io/address/0x1ca57014…A06538
Case & protocol details
Evidence & learning
Sources and on-chain records
- report Report twitter.com
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.