Walletreum Hack

Walletreum's project deployer abused the mint() function and extracted $138k from the project and its investors.

Walletreum was supposed to be an innovative crypto asset management tool focussing on lending and borrowing and real-world application. Unfortunately, the smart contract had malicious functions embedded that allowed the project deployer to mint as many $WALT token as desired.

In fact, the contract deployer used the mint() function to generate 500 billion tokens onto an external wallet:

https://etherscan.io/tx/0xc0f3b057…4710e5

The EOA wallet exchanged the minted tokens for 138,439 $USDT.

https://bloxy.info/txs/calls_from/0x665f3841…29d358?signature_id=1102183&smart_contract_address_bin=0x7a250d56…f2488d

The $USDT 138,439 were exchanged for $ETH:

https://etherscan.io/tx/0xc47c26a8…6e7f15

Then the attacker decided to swap all of the $ETH in his wallet for 156,120 USDT:

https://etherscan.io/tx/0xe20d10e7…fce7ac

Then funds were then transferred to Binance in multiple transactions as can be seen in the example transactions:

https://etherscan.io/tx/0xf9cf08f5…0f221f

https://etherscan.io/tx/0xcce3eacb…7217f9

Scanner

Project Deployer:

https://etherscan.io/address/0xa5e552e3…aee775

EOA Scammer Wallet:

https://etherscan.io/address/0x665f3841…29d358