UniCat.farm Hack

TOTAL LOST $713K
Low Rugpull ethereum

What happened

Function setGovernance() was executed 8 times on the farm contract which allowed the external wallet to withdraw staked tokens:

https://bloxy.info/txs/calls_from/0x3b01feb6…8af8b0?signature_id=1270634&smart_contract_address_bin=0xb246bcd5…8e42cd

Then liquidity was removed:

https://etherscan.io/tx/0x3d9df9fb…bb6644

https://etherscan.io/tx/0x8e54ed37…d9cab1

https://etherscan.io/tx/0x98172882…0a918f

https://etherscan.io/tx/0x94addda7…62f896

https://etherscan.io/tx/0x0f59d547…dd8a3d

https://etherscan.io/tx/0x52bf0897…fb7222

https://etherscan.io/tx/0x0f51d522…b56ca0

https://etherscan.io/tx/0xbb5a3a13…8d8a3e

Stolen funds were mixed with others in the long chain of transactions. But the last ones used Tornado Cash:

https://etherscan.io/tx/0xcf5292ba…805f44

https://etherscan.io/tx/0x3d5b4f7c…f7467e

https://etherscan.io/tx/0xac32ddd5…763962

https://etherscan.io/tx/0x599f44a3…0efa0b

Case & protocol details

Classification Exchange (DEX)
Protocol Type Exit Scam/Rugpull
Affected asset / contract MEOW
Official Website unicat.farm/
Protocol Twitter/X @unicatFarm

Evidence & learning

Sources and on-chain records

Browse all hacks

Other incidents recorded with the same attack technique.

Pepe Trump $38K
NYC Memecoin $3.4M
OracleBNB $80K
Aqua $4.7M

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes