TrustPad Hack

TrustPad, a DeFi launchpad on Binance Smart Chain, was exploited, resulting in the loss of 615.19 BNB worth approximately 152,487 USD.

TrustPad is a DeFi launchpad running on the Binance Smart Chain. On November 7, 2023, the project's vulnerable smart contracts were exploited by an attacker. The vulnerability was in the staking mechanism, allowing the attacker to perform multiple deposit and withdraw transactions to exploit and withdraw roughly 615.19 BNB.

The stolen funds were then deposited into TornadoCash, making it difficult to trace the attacker's identity. The exploit resulted in a loss of approximately 152,487 USD worth of BNB.

Attacker Address:

https://bscscan.com/address/0x1a7b1535…cE0dC9

Malicious Transaction:

https://bscscan.com/tx/0x191a34e6…c03182

Malicious Contract Address:

https://bscscan.com/address/0x1694d7fA…26909a

TornadoCash Deposit Transaction:

https://bscscan.com/tx/0xfe5543ce…734eee