Attack transaction

0xece4a4ac46660618ecee43826fc6f89fe4beaef87ca5e5786f763892b48bc999

EGA Incident

Profitable contract call to the exploit was made

Attacker gained $270,950.90

Transaction Details

Network	bsc
Attacker Address	0xe4fb2bc421897006b4ec351e35e80f0b6702f6c7
Exploit Address	0x55fa881a2676c16fcc8d3678d10290e76f00fd96
Victim Address	0x10ed43c718714eb63d5aa57b78b54704e256024e
Funding Source	railgun
Funds Lost	$270,950.90
Block	42857881
Timestamp	5 Oct 2024 18:38:04 +00:00 (a year ago)

Attack Steps

Funding
5 Oct 2024 18:29:37 +00:00 +0.0 BNB
4 minutes
Exploit Contract Deployment
5 Oct 2024 18:33:59 +00:00
4 minutes
Attack Transaction
5 Oct 2024 18:38:04 +00:00 +$270,950.90

Exploit Analysis

Flashloans	No events	No tx history	console.log	SELFDESTRUCT	CREATE2

Functions
executeOperation(address,uint256,uint256,address,bytes)
rescue(address)
owner()

Events
No events found

Address	Found In
0x5cc05fde1d231a840061c1a2d7e913cedc8eabaf	bytecode
0xe4fb2bc421897006b4ec351e35e80f0b6702f6c7	storage
0xbb4cdb9cbd36b01bd1cbaebf2de08d9173bc095c	storage
0x10ed43c718714eb63d5aa57b78b54704e256024e	storage
0xd151e5f58b6dad0ec955e7148735c96f4e3b2ffa	storage
0x6807dc923806fe8fd134338eabca509979a7e0cb	storage

External Call	To
transfer(address,uint256)	0xbb4cdb9cbd36b01bd1cbaebf2de08d9173bc095c
approve(address,uint256)	0xbb4cdb9cbd36b01bd1cbaebf2de08d9173bc095c
flashLoanSimple(address,address,uint256,bytes,uint16)	0x6807dc923806fe8fd134338eabca509979a7e0cb
balanceOf(address)	0xd151e5f58b6dad0ec955e7148735c96f4e3b2ffa
swapExactTokensForTokensSupportingFeeOnTransferTokens(uint256,uint256,address[],address,uint256)	0x10ed43c718714eb63d5aa57b78b54704e256024e
approve(address,uint256)	0xd151e5f58b6dad0ec955e7148735c96f4e3b2ffa
balanceOf(address)	0xbb4cdb9cbd36b01bd1cbaebf2de08d9173bc095c