What happened
Venus Token vault was exploited, resulting in a loss of 16,937 $USD.
Venus Token is a BEP20 token trading on PancakeSwap. The vault contract VenusDevide was exploited. Worth mentioning that the affected contract has no relationship with the original token, and the token has over 600,000 $USD in liquidity after the exploit.
An EOA address could call an unprotected function on an unverified contract named VenusDevide which held more than 8 million $VUS tokens. The attacker deployed multiple malicious contracts and withdrew $VUS tokens from the vulnerable contract. They then swapped them for 54.7 $BNB (worth 16,937 $USD at the time) before self-destructing their malicious contracts.
All stolen funds remain in possession of the attacker's original address.
Attacker Address:
Malicious Transaction:
Swap Transaction:
Main Malicious Contract:
Protocol details
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
