Swello Finance Rug Pull
What happened
Swello Finance has been rugpulled by the contract owner of the project. The contract owner called the pullForBNB() function through an unverified contract that dumped $SWLO against $WBNB via PancakeSwap.
Swello Finance was a staking service provider with a high APY rating.
The token owner address received 3.8b $SWLO tokens from the contract deployer in this tx: Tx 0x66bc…90a4.
Then the token owner interacted with an unverified smart contract that was created by the scammer. By calling the pullForBNB() function the smart contract exchanged 7.3b $SWLO tokens in total on PancakeSwap to ~891 WBNB and transferred the funds to the scammer wallet address (Tx 0xb99d…9971).
As the time of this writing information on this case is scarce. More sources will be added if the case should develop.
Scammer address (A): Address 0xf23c…7c32
Scammer address (B): Address 0x70d4…3100
Scammer's contract: Address 0x4aa9…5e6f
Involved addresses:
Addresses contacted with scammer's contract: Token transfers 0x4aa9…5e6f
Protocol details
Evidence
- report Report desk.lsr.finance
- report Report coinmarketbag.com
- analysis Web Archive web.archive.org
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.