Trusta AI Hack

On July 23, 2025, Trusta AI ($TA) tokens became the target of a liquidity pool exploit on Binance Smart Chain, just hours after the asset launched on Binance Alpha. The attack involved an unverified third-party contract that exploited user approvals to drain approximately $615,000 worth of tokens through fake liquidity pools and unauthorized swaps.

The attacker deployed a malicious, non-open-source contract (0x16d7c6f4…71a551) that failed to validate user input and lacked slippage protection. Users had pre-approved this contract for token interactions, allowing the attacker to use WBNB tokens from any approved user to swap through a fake WBNB-TA liquidity pool created by the attacker. The exploit worked by harvesting TA tokens from the malicious pool and then selling them in legitimate pools to extract WBNB tokens without user authorization.

The attack began shortly after TA's trading launch when the token had reached $63 million in trading volumes. The rogue contract was created two days prior to the attack with only 0.3 BNB funding. As a result of the exploit, TA's price crashed from $0.17 to $0.09, though it later recovered to as high as $0.23.

The attack primarily affected small-scale holders with self-custodial wallets who were part of the Binance Alpha program.

Malicious Contract Address:

0x16d7c6f4…71a551

TA Token Contract:

0x539ae81a…11b140