Root-cause analysis not yet published. The incident description below contains all currently available signal — review the attack transaction directly for definitive forensics.
The encrypted art platform Art Coin deployed a liquidity pool (LP pool) on Uniswap V3 on May 7. After a user discovered a loophole in the pre-sale process of Art Coin’s ART token Uniswap V3, he immediately sold the ART he bought at 0.01 ETH during the pre-sale period, and obtained 181 ETH in the liquidity, worth about 331,000 US dollars. Some have questioned the legitimacy of the user's actions, saying the user performed a Rug Pull. The Art Coin founder has since released a statement saying the bug was due to miscommunication: “Two developers will help us understand LP and set it up. Due to miscommunication, we set up LP before distributing tokens. Therefore, When we sent out the first batch of tokens, the bots ran out of it like crazy." Attack method (per SlowMist): LP Vulnerability. Reported loss: $ 331,000.
- chain
- —
- protocol
- Art Coin
- bug_class
- rug
- date_occurred
- 2023-05-07
- loss_usd
- $331,000
- source_id
- sm:art-coin::2023-05-07