Venus Token Hack

Venus Token vault was exploited, resulting in a loss of 16,937 $USD.

Venus Token is a BEP20 token trading on PancakeSwap. The vault contract VenusDevide was exploited. Worth mentioning that the affected contract has no relationship with the original token, and the token has over 600,000 $USD in liquidity after the exploit.

An EOA address could call an unprotected function on an unverified contract named VenusDevide which held more than 8 million $VUS tokens. The attacker deployed multiple malicious contracts and withdrew $VUS tokens from the vulnerable contract. They then swapped them for 54.7 $BNB (worth 16,937 $USD at the time) before self-destructing their malicious contracts.

All stolen funds remain in possession of the attacker's original address.

Attacker Address:

https://bscscan.com/address/0x4C1F9028…322E5A

Malicious Transaction:

https://bscscan.com/tx/0x90ee7abd…3c249f

Swap Transaction:

https://bscscan.com/tx/0x457a20d1…606eb1

Main Malicious Contract:

https://bscscan.com/address/0x78C6FA5F…232759