Attack transaction

0x7b57da06f0b72672aad9361db8cfbb48e605993c6befa23942683f1dffa76119

Yiedl.ai Incident

Exploit transaction in initcode

Detected exploit transaction in contract deployment initcode

Transaction Details

Network	bsc
Attacker Address	0xd4f04374385341da7333b82b230cd223143c4d62
Exploit Address	0x3cb53ce1c932794a6c7aee3a438774724aef9aed
Victim Address	0x4edda16ab4f4cc46b160abc42763ba63885862a4
Funding Source	tornado
Funds Lost	$2,122.00
Block	38126931
Timestamp	24 Apr 2024 1:33:34 +00:00 (a year ago)

Attack Steps

Funding
26 Jan 2024 16:37:16 +00:00 +1.0 BNB
3 months
Exploit Contract Deployment
24 Apr 2024 1:33:34 +00:00
a few seconds
Attack Transaction
24 Apr 2024 1:33:34 +00:00 +$2,122.00

Exploit Analysis

Flashloans	No events	No tx history	console.log	SELFDESTRUCT	CREATE2

Functions
setOwner(address)
print()
withdraw(address)
owner()
fallback()

Events
No events found

Address	Found In
0x4edda16ab4f4cc46b160abc42763ba63885862a4 (SpotVault)	bytecode
0xf8a0bf9cf54bb92f17374d9e9a321e6a111a51bd (BEP20LINK)	bytecode
0x7130d2a12b9bcbfae4f2634d864a1ee1ce3ead9c (BEP20Token)	bytecode
0x3ee2200efb3400fabb9aacf31297cbdd1d435d47 (BEP20Cardano)	bytecode
0x1111111254eeb25477b68fb85ed929f73a960582 (AggregationRouterV5)	bytecode
0x570a5d26f7765ecb712c0924e4de545b89fd43df	bytecode
0xcc42724c6683b7e57334c4e856f4c9965ed682bd	bytecode
0x55d398326f99059ff775485246999027b3197955	bytecode
0x2170ed0880ac9a755fd29b2688956bd959f933f8	bytecode
0x8ac76a51cc950d9822d68b83fe1ad97b32cd580d	bytecode
0xd4f04374385341da7333b82b230cd223143c4d62	storage

External Call	To
transfer(address,uint256)
balanceOf(address)