Attack transaction

0x4f0d8f935eee6608ac38bfc0de9da98254b8e09d1b2ef2f81023f742d5e90287

Profitable contract call to the exploit was made

Attacker gained $208.00

Transaction Details

Network	bsc
Attacker Address	0x835b45d38cbdccf99e609436ff38e31ac05bc502
Exploit Address	0x3559ee265fc9c5c9a333b07e0199480b4a84f369
Victim Address	0xb726ebb38ed94239f5dd4f74a9da30ab803e4568
Funding Source	tornado
Funds Lost	$208.00
Block	36159532
Timestamp	15 Feb 2024 14:35:04 +00:00 (a year ago)

Attack Steps

Funding
22 May 2024 9:01:00 +00:00 +1.0 BNB
3 months
Exploit Contract Deployment
15 Feb 2024 11:30:22 +00:00
3 hours
Attack Transaction
15 Feb 2024 14:35:04 +00:00 +$208.00

Exploit Analysis

Flashloans	No events	No tx history	console.log	SELFDESTRUCT	CREATE2

Functions
withdraw()
withdraw(address)
DPPFlashLoanCall(address,uint256,uint256,bytes)
transferOwnership(address)

Events
No events found

Address	Found In
0x6098a5638d8d7e9ed2f952d35b2b67c34ec6b476 (DPP)	storage
0x971d08bba900230298add23e61e04b04226b5073	storage
0x10ed43c718714eb63d5aa57b78b54704e256024e (PancakeRouter)	storage
0x5eb47c41fc9becf123c9e484c51de37830842add	storage
0x7fe5faf242015cf769ae7fea565b96351dd957a2 (Token)	storage
0x835b45d38cbdccf99e609436ff38e31ac05bc502	storage
0xbb4cdb9cbd36b01bd1cbaebf2de08d9173bc095c	storage

External Call	To
transfer(address,uint256)	0xbb4cdb9cbd36b01bd1cbaebf2de08d9173bc095c
setApprovalForAll(address,bool)	0x5eb47c41fc9becf123c9e484c51de37830842add
flashLoan(uint256,uint256,address,bytes)	0x6098a5638d8d7e9ed2f952d35b2b67c34ec6b476 (DPP)
balanceOf(address)	0x7fe5faf242015cf769ae7fea565b96351dd957a2 (Token)
balanceOf(address)	0xbb4cdb9cbd36b01bd1cbaebf2de08d9173bc095c
swapExactTokensForTokensSupportingFeeOnTransferTokens(uint256,uint256,address[],address,uint256)	0x10ed43c718714eb63d5aa57b78b54704e256024e (PancakeRouter)
approve(address,uint256)
0x00000044	0x971d08bba900230298add23e61e04b04226b5073