Swello Finance Rug Pull

Reported loss $210K
Rugpull

What happened

Swello Finance has been rugpulled by the contract owner of the project. The contract owner called the pullForBNB() function through an unverified contract that dumped $SWLO against $WBNB via PancakeSwap.

Swello Finance was a staking service provider with a high APY rating.

The token owner address received 3.8b $SWLO tokens from the contract deployer in this tx: Tx 0x66bc…90a4.

Then the token owner interacted with an unverified smart contract that was created by the scammer. By calling  the pullForBNB() function the smart contract exchanged 7.3b $SWLO tokens in total on PancakeSwap to ~891 WBNB  and transferred the funds to the scammer wallet address (Tx 0xb99d…9971).

As the time of this writing information on this case is scarce. More sources will be added if the case should develop.

Scammer address (A): Address 0xf23c…7c32

Scammer address (B): Address 0x70d4…3100

Scammer's contract: Address 0x4aa9…5e6f

Involved addresses:

Address 0x5113…c22c

Address 0x7cc4…7e79

Addresses contacted with scammer's contract: Token transfers 0x4aa9…5e6f

Protocol details

Classification Other
Protocol Type Exit Scam/Rugpull
Affected asset / contract SWLO

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.