Union Capital Hack
What happened
The project was holding a fundraising event using TokenSale smart contract:
https://etherscan.io/address/0x87b5ef63…b86259#code
1000 ETH were raised on the token sale:
shorturl.at/svwF4
The Initial liquidity, using 500 ETH from the token sale was added:
https://etherscan.io/tx/0xfd1e40f9…da58a6
Tokens were bought for (10 + 10 + 20 + 100 + 50) ETH:
https://bloxy.info/tx/0x2e97605c…a7a895
https://bloxy.info/tx/0xc2a3c840…1865f6
https://bloxy.info/tx/0xd5fa35af…74f42d
https://bloxy.info/tx/0x2d3f3bb0…551165
https://bloxy.info/tx/0x12354f0d…6aa818
83.6 ETH were drained by removing the liquidity:
https://bloxy.info/txs/calls_from/0xca8b324d…e48b88?signature_id=1137786&smart_contract_address_bin=0x7a250d56…f2488d
https://bloxy.info/txs/calls_from/0xca8b324d…e48b88?signature_id=1102188&smart_contract_address_bin=0x7a250d56…f2488d
Case & protocol details
Security review history
- PeckShield Report
Evidence & learning
Sources and on-chain records
- report Report unioncapital.io
- analysis Web Archive web.archive.org
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.