SuperStep Rug Pull

The SuperStep project was rugpulled by the team that worked on it. The team created a staking platform, offering a high annual income from staking. The project entailed a backdoor in the contract, allowing the creator address to withdraw all of the staked $BNB within the protocol.

SuperStep is a fitness DAPP empowered by Jog-to-Earn mechanism.

The scammers created contracts to attract investors to their project. In order to make the token valuable, they created a pair on PancakeSwap in this transaction:

Tx 0x8327…9acc

Then they made an airdrop, which attracted even more investment in the project:

Source

When funds were deposited into the staking contract, scammers began to withdraw funds:

Address 0xaef5…4885.

Funds were laundered via Tornado.cash.

As the time of this writing information on this case is scarce. More sources will be added if the case should develop.

Involved address:

Scammer address (A): Address 0xaef5…4885

Scammer address (B): Address 0x52c5…caac

Scammer address (C): Address 0xd2f7…e812

Liquidity pool creation transaction: Tx 0x8327…9acc

Contracts interacted with:

Token address: Address 0x6f7a…b55f

Gem address: Address 0x594b…5633

Unverified contract addresses:

1. Address 0x9482…d2c0
2. Address 0x9482…d2c0