VERDICT —UNRATED
Verdict pending. Auto-ingested incidents are reviewed before a public verdict is rendered.
Root cause
Root-cause analysis not yet published. The incident description below contains all currently available signal — review the attack transaction directly for definitive forensics.
Forensic narrative
By forcing the staker contract to accept a liquidity pair containing a fake token, the attacker was able to remove $1.3 million in liquidity. The attacker created a fake token called AXZ and supplied rAXZZ/GRO liquidity. He then staked it in the contract and pulled out the other pair. Reported loss: $1,300,000.
Primary source
https://rekt.news/the-big-combo/ ↗Sourced from
chainsec
Technical record
- chain
- —
- protocol
- Growth DeFi
- bug_class
- token-supply
- date_occurred
- 2021-02-08
- loss_usd
- $1,300,000
- source_id
- cs:growth-defi::2021-02-08
Related — same bug class· token-supply