What happened
Function setGovernance() was executed 8 times on the farm contract which allowed the external wallet to withdraw staked tokens:
Then liquidity was removed:
Stolen funds were mixed with others in the long chain of transactions. But the last ones used Tornado Cash:
Protocol details
Classification
Exchange (DEX)
Protocol Type
Exit Scam/Rugpull
Affected asset / contract
MEOW
Protocol links
Website
@unicatFarm
Evidence
- report @amanusk_ incident report twitter.com
- analysis de.fi Analysis t.me
- analysis Web Archive web.archive.org
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
