Published inSolidityScan·Sep 12Banana Token Hack AnalysisOverview: On September 11, 2023, The launch of the Telegram bot Banana Gun’s native token BANANA faced a huge drop in price due to a business logical vulnerability, with the price of the newly launched BANANA falling from a peak of $8.70 to $0.02 in less than 3 hours after it…Smart Contract Security2 min readSmart Contract Security2 min read
Published inCoinmonks·Sep 8LeetSwap Hack AnalysisOn August 1, 2023, LeetSwap on the Base platform experienced an attack due to an Access Control vulnerability resulting in a substantial loss of over 340 ETH. Smart Contract Hack Overview: Attackers address: 0x705f73 Attack Contract: 0xea8f89 Vulnerable contract: 0x94dac4 Attack Transaction: 0xbb837 Decoding the Smart Contract Vulnerability: The attacker exploited the public _transferFeesSupportingTaxTokens function to manipulate the pool’s…Smart Contract Security2 min readSmart Contract Security2 min read
Published inSolidityScan·Sep 8DAppSocial Hack AnalysisOverview: On September 2, 2023, DAppSocial suffered a hack due to a business logic vulnerability, leading to an approximate loss of ~16k USD. Smart Contract Hack Overview: Attacker address : 0x7d9bc4 Attack Contract : 0xe897c0 Helper Attack Contract : 0xa8c6e7 Vulnerable Contract : 0x319ec3 Attack Transaction : 0xbd72bc Decoding the Smart Contract Vulnerability: The attacker initiated…Smart Contract Security2 min readSmart Contract Security2 min read
Published inSolidityScan·Sep 5Zunami Protocol Hack AnalysisOverview: On August 14, 2023, the Zunami protocol suffered a price manipulation attack, leading to an approximate loss of ~2M USD. Smart Contract Hack Overview: Attacker Address: 0x5f4c21c Attack Contract: 0xa21a2b Vulnerable Contract: 0xb40b6 Attack Transaction: 0x0788b Decoding the Smart Contract Vulnerability: 1)The root cause was the manipulation of prices resulting from an attack due to the incorrect computation of…Smart Contract Security3 min readSmart Contract Security3 min read
Published inSolidityScan·Aug 24EarningFarm Hack AnalysisOverview: On August 9, 2023, EarningFarm suffered a reentrancy attack, leading to an approximate loss of ~286k USD. Smart Contract Hack Overview: Attacker Address: 0xee4b3d Attack Contract: 0xfe141c Vulnerable Contract: 0x863e57 Attack Transaction: 0x6e6e55 Decoding the Smart Contract Vulnerability: The root cause was the abnormal handling of the shares and LP token ENF_ETHLEV, which resulted in the value of the…Smartcontract Audit2 min readSmartcontract Audit2 min read
Published inSolidityScan·Aug 8Uwerx Hack AnalysisOverview On August 2, 2023, Uwerx was hacked due to a business logic vulnerability, leading to an approximate loss of ~176 ETH. Smart Contract Hack Overview: Attacker Address: 0x6057a8 Attack Contract: 0xda2ccf Vulnerable Contract: 0x4306b1 Attack Transaction: 0x3b19e1 Decoding the Smart Contract Vulnerability: Utilizing a flashloan of 20000 ETH, the attacker executed a swap for approximately 5053637 UWERX tokens. Subsequently…Smart Contract Security2 min readSmart Contract Security2 min read
Published inSolidityScan·Aug 7JPEG’d Hack AnalysisOverview: On July 30, 2023, JPEG’d experienced a significant security breach due to a reentrancy vulnerability resulting in a loss of ~11.4M USD. Vyper versions 0.2.15, 0.2.16 and 0.3.0 are vulnerable to malfunctioning reentrancy locks. AlchemixFi, MetronomeDAO, DebridgeFinance and Ellipsisfi are some more projects that faced a similar issue. Smart Contract Hack Overview: Frontrunner Address…Smartcontract Audit2 min readSmartcontract Audit2 min read
Published inCoinmonks·Aug 3LibertiVault Hack AnalysisOverview: On July 11, 2023, LibertiVault experienced a significant security breach due to a reentrancy vulnerability resulting in a loss of ~452K USD. Smart Contract Hack Overview: Attackers address: 0xfd2d3f Attack Contract: 0xdfcdb5 Vulnerable contract: 0x9c80a4 Attack Transaction: 0x7320ac Decoding the Smart Contract Vulnerability: The attacker initiated the attack by taking a flash loan of 5M USDT and proceeded to…Smartcontract Audit3 min readSmartcontract Audit3 min read
Published inSolidityScan·Aug 3Platypus Hack AnalysisOverview: On July 12, 2023, Platypus suffered an attack on the Ethereum chain, due to a business logic issue leading to a loss of ~51K USD. Smart Contract Hack Overview: Attackers address: 0xc64afc Attack Contract: 0x16a3c9 Vulnerable Contract: 0x7e1333 Attack Transaction: 0x4b544e Decoding the Smart Contract Vulnerability: The main cause of the problem lies in the calculation of liquidity conversion…Smart Contract Security2 min readSmart Contract Security2 min read
Published inSolidityScan·Jul 28$FFIST Hack AnalysisOverview: On July 20, 2023, $FFIST suffered an attack due to a business logic issue leading to a loss of ~110K USD. Smart Contract Hack Overview: Vulnerable Contract: 0x80121d Attacker address: 0xcc8617 Attack Transaction: 0x199c4b Decoding the Smart Contract Vulnerability: The _airdrop() function is intended to distribute $FFIST tokens randomly to different addresses. Unfortunately, the…Smartcontract Audit2 min readSmartcontract Audit2 min read
