What happened
The contract deployer added initial liquidity at:
The contract deployer used withdrawFromContract() function to transfer tokens from the staking smart contract onto his own address:
The liquidity was removed by the contract deployer at:
The project's native tokens were sold multiple times as well, the example transaction:
The stolen BNB tokens were exchanged on Binance BTC tokens at:
The BTCB tokens were distributed between different external addresses and deposited into the Binance exchange, the example:
Protocol details
Evidence
- report Report vice.uno
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
