Incident Overview
Contract creation:
https://etherscan.io/tx/0xc82dca27…e5278b
The initial liquidity was added at:
https://etherscan.io/tx/0x72a411d5…831712
The liquidity was removed multiple times at: https://etherscan.io/tx/0xd747395b…0119a2
https://etherscan.io/tx/0xdcae64ae…10c674
https://etherscan.io/tx/0xdb6b4668…0a2421
https://etherscan.io/tx/0xe9a6556b…bb71d5
https://etherscan.io/tx/0xdb1f1fa9…dab37a
https://etherscan.io/tx/0xe12cfd46…8a3085
https://etherscan.io/tx/0xfb5f3907…87a94e
https://etherscan.io/tx/0xfef60059…0e9090
https://etherscan.io/tx/0x29c74c55…5537ee
https://etherscan.io/tx/0xa58fdc28…4ec738
https://etherscan.io/tx/0x4cb51484…cd076e
https://etherscan.io/tx/0x893ccfe7…8cb790
https://etherscan.io/tx/0xb1c6bf7e…4d19ec
https://etherscan.io/tx/0x846a7674…909033
https://etherscan.io/tx/0xc148a802…5dbaac
https://etherscan.io/tx/0x72739e9c…5dd446
Incident Report
Protocol Information
What the Attacker Needed to Succeed
Understanding the prerequisites for this type of attack helps auditors identify protocols that are most at risk and helps developers build better defenses.
What Auditors Should Check
If you're auditing a protocol with similar architecture to WinPlay, these are the critical security checks that could have prevented this incident (September 2020).
- Verify all logic paths related to Rugpull are guarded by proper access controls and input validation
- Review privileged functions (owner, admin, governance) for potential abuse vectors - centralization risks should be documented and bounded with timelocks or multi-sigs
Master these auditing techniques with hands-on labs and real exploit scenarios in the Smart Contract Hacking course.
Free TrialSources & References
-
01
Source 1 https://t.me/defiyield_ann/7
- 02
Learn to Prevent the Next WinPlay
The WinPlay hack is one of many attacks that skilled auditors are trained to detect before deployment. Master real exploit patterns and defense techniques with hands-on Web3 security training.