Attack transaction

0xa94338d8aa312ed4b97b2a4dcb27f632b1ade6f3abec667e3bf9f002a75dabe0

TCH Incident

Profitable contract call to the exploit was made

Attacker gained $18,626.47

Transaction Details

Network	bsc
Attacker Address	0xb9596d6e53d81981b9f06ca2ca6d3e422232d575
Exploit Address	0x258850ec735f6532fe34fe24ef9628992a9b7e84
Victim Address	0xb7f1fff722e68a6fc44980f5d48d6d3dbc1fe9cf
Funding Source	tornado
Funds Lost	$18,626.47
Block	38776240
Timestamp	16 May 2024 15:42:08 +00:00 (8 months ago)

Attack Steps

Funding
27 Apr 2024 3:50:52 +00:00 +1.0 BNB
19 days
Exploit Contract Deployment
16 May 2024 15:39:20 +00:00
3 minutes
Attack Transaction
16 May 2024 15:42:08 +00:00 +$18,626.47

Exploit Analysis

Flashloans	No events	No tx history	console.log	SELFDESTRUCT	CREATE2

Functions
fallback()

Events
No events found

Address	Found In
0x10ed43c718714eb63d5aa57b78b54704e256024e (PancakeRouter)	storage
0x258850ec735f6532fe34fe24ef9628992a9b7e84	storage
0x55d398326f99059ff775485246999027b3197955 (BEP20USDT)	storage
0xb9596d6e53d81981b9f06ca2ca6d3e422232d575	storage
0xca143ce32fe78f1f7019d7d551a6402fc5350c73 (PancakeFactory)	storage

External Call	To
swapExactTokensForTokensSupportingFeeOnTransferTokens(uint256,uint256,address[],address,uint256)	0x10ed43c718714eb63d5aa57b78b54704e256024e (PancakeRouter)
balanceOf(address)	0x55d398326f99059ff775485246999027b3197955 (BEP20USDT)
getPair(address,address)	0xca143ce32fe78f1f7019d7d551a6402fc5350c73 (PancakeFactory)
transfer(address,uint256)	0x55d398326f99059ff775485246999027b3197955 (BEP20USDT)
approve(address,uint256)
flash(address,uint256,uint256,bytes)
0x969cdd03	0x000000000000000000636f6e736f6c652e6c6f67
0xf41d1eb1