What happened
The project was holding a presale event. The fund's recipient was the contract deployer:
https://etherscan.io/txs?a=0xbf6b0f0d…111136&p=2
After the presale, the contract deployer added initial liquidity at:
https://etherscan.io/tx/0x03c23588…70d0e8
The LP tokens were locked by the contract deployer:
https://etherscan.io/tx/0x77d8139a…9e57a5
The rest of the funds were deposited into the Tornado Cash mixer:
https://etherscan.io/tx/0xcd09235d…3b1873
https://etherscan.io/tx/0x52fd5e60…2f660d
After the LP tokens were unlocked, the liquidity was removed by the contract deployer at:
https://etherscan.io/tx/0xbcde68e5…650cf5
Case & protocol details
Evidence & learning
Sources and on-chain records
- report Report twitter.com
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.