YFFC Hack
What happened
Investors of the YFFC project lost approx. $72k collectively due to the project deployers right
YFFC was supposed to be a platform that unites a variety of DeFi platforms, ensuring an easier navigation through the crypto space for users. However, the smart contract contained a function that allowed contract deployer to mint as many $YFFC token as desired.
The contract deployer added initial liquidity at:
https://etherscan.io/tx/0x02cf382c…355d94
Almost 2 months after adding liquidity and once the $YFFC token was trading at an acceptable price for the contract deployer, the exploit started.
The contract deployer invoked the mint() function to generate new tokens onto the external wallet at:
https://etherscan.io/tx/0x39cecb2f…d99064
The external wallet sold newly minted tokens almost immediately at:
https://etherscan.io/tx/0xc3d42e64…c88c5f
Contract Deployer:
https://etherscan.io/address/0xe28db60e…c99ec4
Scammer Address B:
https://etherscan.io/address/0xa360d8e3…330a9a
Case & protocol details
Evidence & learning
Sources and on-chain records
- report Report web.archive.org
- analysis de.fi Analysis t.me
- analysis Web Archive web.archive.org
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.