Published inSolidityScan·May 31Local Traders Hack Analysis — Missing Access ControlOverview On May 23, 2023, the P2P exchange, Local Traders, experienced an exploit due to a missing access control vulnerability on the BNB chain, leading to an approximate loss of 379.32 BNB. Smart Contract Hack Overview: Attackers address: 0xd771df Vulnerable contract: 0x312dc3 Attacker Transactions: 0x49a303 Decoding the Smart Contract Vulnerability: The root cause of the…Smart Contract Security3 min readSmart Contract Security3 min read
Published inSolidityScan·May 29Sell Token Hack AnalysisOverview: On May 14, 2023, Sell Token suffered a security breach caused by a vulnerability that arose due to the smart contract’s failure to properly validate input parameters. Smart Contract Hack Overview: Attackers address: 0xa3aa81 Vulnerable contract: 0xeaf834 Attacker Transactions: 0xfe80df Decoding the Smart Contract Vulnerability: The StakingRewards contract’s Claim() function lacked…Smart Contract Security2 min readSmart Contract Security2 min read
Published inSolidityScan·May 25$LAND Hack Analysis — Missing Access ControlOverview: On May 14, 2023, $LAND suffered a hack due to a Missing Access Control vulnerability that resulted in a total loss of 149,616 $BUSD. Smart Contract Hack Overview: Attackers address: 0x96b89c Vulnerable contract: 0x1a62fe Attacker Transactions: 0xe4db15 Decoding the Smart Contract Vulnerability: The $land project allowed multiple miner addresses to mint NFTs, and one…Smartcontract Audit2 min readSmartcontract Audit2 min read
Published inSolidityScan·May 11Snooker Token Hack AnalysisOverview: On May 10, 2023, the Snooker(SNK) token was exploited due to a business logic issue resulting in a total loss of $190K. Smart Contract Hack Overview: Vulnerable contract: 0xa3f5ea Attackers address: 0x6b67f9 Exploit contract: 0xc04c49 Attacker Transactions:0x7394f2 Decoding the Smart Contract Vulnerability. The exploiter set up numerous contracts and deposited 10 $SNK into each contract 10 days…Smart Contract Security2 min readSmart Contract Security2 min read
Published inSolidityScan·May 9DEUS DAO Hack AnalysisOverview: On May 5, 2023, Deus DAO was exploited due to a business logic issue resulting in a total loss of $6.5M across Arbitrum, BSC, and Ethereum chains. This vulnerability was detected by our tool SolidityScan which detects 130+ smart contract vulnerabilities. Signup for a free trial at https://solidityscan.com/signup Smart Contract Hack Overview: Vulnerable Contract…Smartcontract Audit3 min readSmartcontract Audit3 min read
Published inSolidityScan·May 6Level Finance Hack AnalysisOverview: On May 1, 2023, Level Finance was exploited due to a business logic issue and incorrect calculation resulting in a total loss of $1.1M Smart Contract Hack Overview: Attackers address: 0x70319 Vulnerable contract: 0x9f00f Attacker Transactions: 0xe1f25 Decoding the Smart Contract Vulnerability: The claim reward was determined by the tier of referral and…Smart Contract Security2 min readSmart Contract Security2 min read
Published inSolidityScan·May 2Sashimi Swap Hack Analysis — Improper Swap & Router DesignOverview: Due to an inappropriate swap and the Sashmi router’s architectural design, an attack on the Sashimi swap happened on December 30, 2021, causing a loss of $210,000. Smart Contract Hack Overview: Attacker’s address: 0xa81894 Attacker’s transaction: 0xdf719d2 Attacker contract: 0x4d8056 Vulnerable contract: 0xe4fe6a DVM contract: 0x7ca7b5 Decoding the Smart Contract Vulnerability: Three fraudulent tokens were produced as part of…Smart Contract Security3 min readSmart Contract Security3 min read
Published inSolidityScan·Apr 30Ovix Protocol Hack Analysis — Oracle Price ManipulationOverview: On April 28, 2023, an incident took place that gave an attacker the chance to alter the Ovix protocol’s price oracle. By depositing a significant number of vGHST tokens into the VGHSTOracle Contract, the attackers were able to fraudulently increase the price of vGHST to GHST, causing the protocol’s users…Smart Contract Security3 min readSmart Contract Security3 min read
Published inSolidityScan·Apr 26Unlock Protocol Hack Analysis — Improper Caller ValidationOverview: On April 21, 2023, a hack occurred on the Unlock Protocol, which led to the loss of 20 ETH to the protocol users. The root cause of the attack was improper caller validation on the postLockUpgrade() function. Smart Contract Hack Overview: Attacker’s address: 0x43ee4,0x3a683 Attacker’s transaction: 0x4ac413 Vulnerable contract:0xe79b UDT…Smart Contract Security2 min readSmart Contract Security2 min read
Published inSolidityScan·Apr 19Ocean Life token hack analysis — Flash Loan AttackOverview: On April 19, 2023, the Ocean Life token on BSC was hacked. The attacker used a flawed mechanism to lower the overall token supply and manipulate the price, earning 32 WBNB in return. Smart Contract Hack Overview: Attackers transaction:0xa21692 Attacker address:0xfb8e Stolen funds address: 0x662D OcenaLife Contract code: 0xb5a0c Vulnerable…Smart Contract Security3 min readSmart Contract Security3 min read
