lazarusholic

2022-02-01, QubitFinance
https://medium.com/@QubitFin/protocol-exploit-report-4-92f54d0458de
#Cryptocurrency #Qubit

Protocol Exploit Report 4
TL;DR
- The exploiter swapped all of the assets for ETH.
- All the funds are now in one wallet(0xd01ae1a708614948b2b5e0b7ab5be6afa01325c7).
Timeline
- Jan-31–2022 09:34:14 PM +UTC, The exploiter moves funds to a new BSC wallet
- From address : 0xE56d461F957bB0e81AB6d1c15926Cd9653Aa6333
- New address : 0xE47044A84047A9540956DB668E97D2336B01D006
- Refer to the Transaction [1] at the end of this report
- Jan-31–2022 09:35:58 PM +UTC, The exploiter swaps some funds from the new wallet to USDC via PancakeSwap and Ellipsis and then transfers to the celer network
- Transaction ID[2–8]
- Jan-31–2022 09:42:28 PM +UTC, The exploiter transfers more funds to the wallet created in 1), then uses PancakeSwap to convert BNB to ETH, USDT, USDC, and then transfers it to the celer network
- Transaction ID [9–26]
- Failed Transaction ID [16]
- Jan-31–2022 10:07:22 PM +UTC, The exploiter moves more funds, swaps them for USDT and ETH, and sends them to the celer network.
- Transaction ID [27–34]
- Jan-31–2022 10:13:16 PM +UTC, …