What happened
The project announced a fundraising event on their website. This fact can be verified by the link:
https://web.archive.org/web/20210314092242/https://turtledex.io/private-sale
Funds receiver was the official crowd-sale smart contract which gathered 8,999.99 BNB in total, but raised funds were automatically transferred to the bytecoded contract and then transferred to the last recipient finally - EOA wallet:
https://www.bscscan.com/tx/0xba8c0e93…0f927b
Stolen funds were distributed between some external addresses:
https://explorer.bitquery.io/bsc/txs/transfers?sender=0x78aff3b8…f1ff82¤cy=BNB
Case & protocol details
Evidence & learning
Sources and on-chain records
- report Report decrypt.co
- analysis Web Archive web.archive.org
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.