This report includes an in-depth analysis of the attack in its entirety in order to ascertain the nature of the exploit and, to prevent any similar ex

Thursday, 19 May 2021

submited by

Style Pass

2021-05-20 13:23:10

This report includes an in-depth analysis of the attack in its entirety in order to ascertain the nature of the exploit and, to prevent any similar exploits in the future.

10:31:25 PM +UTC — Deposit ed 1BNB worth of USDT/BNB on the USDT/BNB Flip Vault in order to stage the attack. Expectedly, a quantity of LP 9.275 is deposited to the exploiter’s contract.

10:45:10 PM +UTC — In order to whitewash / launder the extorted WBNB from the exploit, 114,631BNB was sent to the following address:

11:18:10 PM +UTC — Officially confirmed as a Flash Loan attack. Paused all deposits/withdrawals to the Vault in order to prevent further attacks.

11:59:55 PM +UTC — From the same address above, about 488,071.8989395982 BUNNY was swapped for about 9,161.3295578776BNB, where a portion of it (327.2930347138 BNB) was further swapped for about 43.2463201179 ETH on PCS via 1inch contract (0x11111112542d85b3ef69ae05771c2dccff4faa26)

We want to thank all the individuals and projects who reached out and helped with pertinent information, and we are continuing to investigate and are in communications with Binance and Etherscan regarding token transfers and other actions.