zkSync Copycat Hack

TOTAL LOST $202K
Low Rugpull

What happened

Quick Summary

Fake zkSync token rugpulled, removing liquidity worth 201,549 $USD; total funds lost equate to 822.65 $BNB.

Details of the Exploit

zkSync (TBD) is a copycat BEP20 token trading on PancakeSwap, not to be confused with the original zkSync project or tokens sharing the same token symbol. On July 28, 2023, the deployer executed a rugpull by removing liquidity from the LP pool in two separate transactions. The stolen funds were subsequently transferred to another EOA address and distributed between multiple addresses.

The total loss in this exit scam is 201,549 $USD, equivalent to 822.65 $BNB.

Block Data Reference

Deployer Address:

https://bscscan.com/address/0x1cd9af6a…ef9a8b

Scammer Address:

https://bscscan.com/address/0xa52f62dc…907594

Liquidity Removal Transactions:

https://bscscan.com/tx/0x65a6f4f5…b23552

https://bscscan.com/tx/0xf748b082…4a9606

Case & protocol details

Classification Token
Protocol Type Exit Scam/Rugpull
Affected asset / contract TBD

Evidence & learning

Sources and on-chain records

Browse all hacks

Other incidents recorded with the same attack technique.

Pepe Trump $38K
NYC Memecoin $3.4M
OracleBNB $80K
Aqua $4.7M

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes