Victor the Fortune Hack

Reported loss $58K
Other

What happened

On 2022-10-27 an attacker exploited a reward-calculation flaw in the Victor the Fortune (VTF) token on BNB Chain and walked away with about 58,450 USDT. VTF paid holders newly minted tokens based on their current balance multiplied by the time since their last update, with no minimum interval between claims. By passing one flash-loaned balance through hundreds of pre-registered contracts, the attacker collected that reward hundreds of times. It then sold the minted VTF into the VTF/USDT pool, draining its USDT.

Attacker: 0x57c112cf4f1e4e381158735b12aaf8384b60e1ce. Attack contract: 0x450595e4a42cc08c14091b08dbab654a68b0a877. Attack transaction: 0xeeaf7e9662a7488ea724223c5156e209b630cdc21c961b85868fe45b64d9b086. DeFiHackLabs lists the loss as about $50K.

How it happened

  1. About two days before the attack, the attacker deployed 400 helper contracts. Each called updateUserBalance(), which recorded the current time as its last-update timestamp while holding no VTF.
  2. On 2022-10-27 the attack contract flash-borrowed 100,000 USDT from a DODO pool and swapped it for about 77,853 VTF.
  3. It sent the VTF to the first helper and chained claim() calls down the list. Each helper called updateUserBalance(), which minted a reward based on its now-large balance and the two days since registration, then forwarded its whole balance, reward included, to the next helper.
  4. After 400 hops the balance had grown to about 499.8 million VTF. The attacker sold it for about 158,450 USDT, repaid the 100,000 USDT loan, and kept about 58,450 USDT.

Protocol details

Classification Token
Protocol Type Exploit/Other
Affected asset / contract VTF

Evidence

Same attack technique

Browse all hacks →
Gala $4.0M lost Deri Protocol $145K lost GeoDB Loss not disclosed Journey of Awakening $127K lost

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes