New year, old news.
Rug pulls are common on Binance Smart Chain.
We’re only mentioning this one because it was larger than most.
~$10 million taken, and no advanced attack techniques in sight.
Arbix Finance labelled themselves as an arbitrage-focused project on BSC, in which users could deposit into single-asset vaults in order “to gain optimal yield with low risk”.
However, their users got the opposite.
Also stolen were:
$920k Binance-pegged ETH
$2.25M in BSC-USD
As well as lesser amounts of ADA, DOT, DOGE, LINK, XRP and WBNB.
In addition to the vault funds, on the 10th December this address minted 4.5M ARBX. Once the rug pull had begun, these tokens were dumped via PancakeSwap, tanking the price from $1.42 to ~$0.00. The ~$50k in proceeds were then sent to the main rug wallet.
Funds were sent from the BSC wallet: 0x4714a26e4e2e1334c80575332ec9eb043b61a2c4
To Ethereum: 0x4714a26e4e2e1334c80575332ec9eb043b61a2c4
And from there, converted into ~2.5k ETH (currently worth ~$9.9M), then sent to 0xdc85c1eb22b0ece7be559a83fd788fe57f5a7a9f.
However, the thread merely served to attract the attention of the frustrated users who had trusted Certik’s stamp of approval.
Will we see more than that this year?
Vote now in our Telegram group.
REKT serves as a public platform for anonymous authors, we take no responsibility for the views or content hosted on REKT.
donate (ETH / ERC20): 0x3C5c2F4bCeC51a36494682f91Dbc6cA7c63B514C
REKT is not responsible or liable in any manner for any Content posted on our Website or in connection with our Services, whether posted or caused by ANON Author of our Website, or by REKT. Although we provide rules for Anon Author conduct and postings, we do not control and are not responsible for what Anon Author post, transmit or share on our Website or Services, and are not responsible for any offensive, inappropriate, obscene, unlawful or otherwise objectionable content you may encounter on our Website or Services. REKT is not responsible for the conduct, whether online or offline, of any user of our Website or Services.
you might also like...
Wintermute have lost over $160M to their second incident this summer. Using a vanity address for "gas savings" has cost them dearly. Last time, funds were returned, will Wintermute get lucky again?
The billion that wasn't. Tornado sanctions didn’t deter these Polkadot thieves, who tried to steal ~$1.3B in aUSD from Acala Network.
Curve fell victim to a DNS hijacking yesterday, with approximately $575k lost to malicious contract approvals. For users, DeFi protocols are only as secure as their centrally-hosted front end. How much longer will web3 rely on web2?