Tetris Finance Hack
What happened
The contract deployer added initial liquidity at:
https://www.bscscan.com/tx/0x932f162d…bd8a39
The contract deployer used hidden migration functionality under the rewardUpdate() to transfer all LP tokens from the reward distribution contracts onto the own wallet at:
https://www.bscscan.com/tx/0x26a4c416…14d497
https://www.bscscan.com/tx/0x0f1c4a13…896f21
https://www.bscscan.com/tx/0xd6dbb59f…db71fd
https://www.bscscan.com/tx/0x026d3649…108d22
https://www.bscscan.com/tx/0x18c3914e…9ed52e
https://www.bscscan.com/tx/0x7d54686b…5e5590
https://www.bscscan.com/tx/0x45e47c92…b3084d
https://www.bscscan.com/tx/0x8d176f37…07d106
The project's native tokens were sold as well, the example transaction:
https://www.bscscan.com/tx/0xd8dd42cb…f373f7
The liquidity was removed by the contract deployer. The received tokens were exchanged on BNB and were distributed between different external wallets at:
https://www.bscscan.com/tx/0x965d4dd7…bc81ef
https://www.bscscan.com/tx/0x5030fc70…97a26f
https://www.bscscan.com/tx/0x84d0f4ba…f29ae8
https://www.bscscan.com/tx/0x46b5fee4…db6943
https://www.bscscan.com/tx/0x671ce100…e12e91
https://www.bscscan.com/tx/0x6985c92b…1fda37
https://www.bscscan.com/tx/0x8dfbab27…c1a0bb
https://www.bscscan.com/tx/0xbacda7bf…2f2d16
Case & protocol details
Evidence & learning
Sources and on-chain records
- report Report tetris.menu
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.