First Release: BNB42 Rug Pull “Crime Scene Investigation” Centralized Problem Reappears

Beijing at 23:06 on February 14, 2022, CertiK technical team to monitor the safety of a contract owner / developer (0x9b74fde50f3fcd3a02fafea6a187092630d6eb8f) in trading https://bscscan.com/tx/0x749215ebe457aa681194684401257fe8fb44daecb9f50a077b12c71e83cf9414 from Bnb42 contract unauthenticated (0x7c8ffcfefff2e62a77bfa82bdba730cc0e8129cf) transferred about 6,445 BNB .

The contract owner transferred the BNB of the Rug Pull in 8 addresses.

q7rf5gb8yfoo6o1h

This is another Rug Pull event following last week’s BabyMusk price plunge.

Fraudster’s address

Fraudster’s address:

https://bscscan.com/address/0x9b74fde50f3fcd3a02fafea6a187092630d6eb8f

The first transfer address of Rug Pull BNB: https://bscscan.com/address/0xeccc6b23401099eb912c4bb1021f4b04995614cc

The second transfer address of Rug Pull BNB: https://bscscan.com/address/0xb77b672cfd045d29b09d0eca336f2311d147b46e

Third: https://bscscan.com/address/0x9d6fab1206dda7443869e6837678f5fc9a089938

Fourth: https://bscscan.com/address/0x3bca51032e61ab6adffce2079952e628daea5b8f

Fifth: https://bscscan.com/address/0x21274ca4e26e2e231d7231f4ad131970a57e09e7

Sixth: https://bscscan.com/address/0x6a433937fd0b4dec7dc2f332c55f43a1ee380a3e

Seventh: https://bscscan.com/address/0xf6d4933afa07c20dac9d6917c89e91656bcf54eb

Eighth: https://bscscan.com/address/0x12a0a80f3418c87a671fe790c37de8709d16c66f

Fraudster’s address

Fraudster’s address:

https://bscscan.com/address/0x9b74fde50f3fcd3a02fafea6a187092630d6eb8f

The first transfer address of Rug Pull BNB: https://bscscan.com/address/0xeccc6b23401099eb912c4bb1021f4b04995614cc

The second transfer address of Rug Pull BNB: https://bscscan.com/address/0xb77b672cfd045d29b09d0eca336f2311d147b46e

Third: https://bscscan.com/address/0x9d6fab1206dda7443869e6837678f5fc9a089938

Fourth: https://bscscan.com/address/0x3bca51032e61ab6adffce2079952e628daea5b8f

Fifth: https://bscscan.com/address/0x21274ca4e26e2e231d7231f4ad131970a57e09e7

Sixth: https://bscscan.com/address/0x6a433937fd0b4dec7dc2f332c55f43a1ee380a3e

Seventh: https://bscscan.com/address/0xf6d4933afa07c20dac9d6917c89e91656bcf54eb

Eighth: https://bscscan.com/address/0x12a0a80f3418c87a671fe790c37de8709d16c66f

Rug Pull deal

Rug Pull Transactions: 

https://bscscan.com/tx/0x749215ebe457aa681194684401257fe8fb44daecb9f50a077b12c71e83cf9414

Rug Pull operation steps

1. The contract owner, 0x9b74fde50f3fcd3a02fafea6a187092630d6eb8f, in the transaction 0x749215ebe457aa681194684401257fe8fb44daecb9f50a077b13c71e83cf9414, called the withdraw function to transfer 6,455B to his own 1772478 address of 6,455B.

2. The contract owner transferred BNB to more than 8 different addresses listed.

3. The BNB in ​​the 8 addresses laundered the origin of the money through Tornado Cash.

Why is it defined as Rug Pull

1. The owner of the contract deploys an unauthenticated contract in which the function withdraw only allows the owner to withdraw all BNB(eth.balance(this.address) wei) to the owner’s address.axeffzwla6k9vek3

2. The decompiled Bnb42 contract is deployed at 0x7c8ffcfefff2e62a77bfa82bdba730cc0e8129cf

vpooykpl09xufipw

3. The owner of the contract (0x9b74fde50f3fcd3a02fafea6a187092630d6eb8f) trades BNB Rug to his own address.

Contract Vulnerability Analysis

This Rug Pull problem is a centralization risk.

In the 2021 DeFi Security Report compiled and compiled by CertiK, the asset losses and related causes caused by such risks in 2021 are described in detail (click “read the original text” at the bottom of the article to download the full version of the report).

Where to go

The contract owner has Rug a total of 6,445.424785656563617736 units of BNB.

Can an audit find problems?

Can. At the same time, CertiK’s security experts advise: When encountering unverified contracts, you need to be cautious when investing.

The warning of this incident has been broadcast on CertiK’s official Twitter [https://twitter.com/CertiKCommunity] for the first time.

ef6d8rbds46drl06

As a leader in blockchain security, CertiK is committed to improving the level of security and transparency in cryptocurrencies and DeFi. To date, CertiK has been recognized by 2,500 enterprise clients, protecting over $311 billion in digital assets from loss.

Posted by:CoinYuppie,Reprinted with attribution to:https://coinyuppie.com/first-release-bnb42-rug-pull-crime-scene-investigation-centralized-problem-reappears/
Coinyuppie is an open information publishing platform, all information provided is not related to the views and positions of coinyuppie, and does not constitute any investment and financial advice. Users are expected to carefully screen and prevent risks.

Like (1)
Donate Buy me a coffee Buy me a coffee
Previous 2022-02-15 21:16
Next 2022-02-15 21:17

Related articles