YFFC Hack

TOTAL LOST $72K
Low Rugpull ethereum

What happened

Investors of the YFFC project lost approx. $72k collectively due to the project deployers right

YFFC was supposed to be a platform that unites a variety of DeFi platforms, ensuring an easier navigation through the crypto space for users. However, the smart contract contained a function that allowed contract deployer to mint as many $YFFC token as desired.

The contract deployer added initial liquidity at:

https://etherscan.io/tx/0x02cf382c…355d94

Almost 2 months after adding liquidity and once the $YFFC token was trading at an acceptable price for the contract deployer, the exploit started.

The contract deployer invoked the mint() function to generate new tokens onto the external wallet at:

https://etherscan.io/tx/0x39cecb2f…d99064

The external wallet sold newly minted tokens almost immediately at:

https://etherscan.io/tx/0xc3d42e64…c88c5f

Contract Deployer:

https://etherscan.io/address/0xe28db60e…c99ec4

Scammer Address B:

https://etherscan.io/address/0xa360d8e3…330a9a

Case & protocol details

Classification Yield Aggregator
Protocol Type Exit Scam/Rugpull
Affected asset / contract YFFC
Official Website yffc.finance/

Evidence & learning

Sources and on-chain records

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.