Optimism-based lending protocol Kokomo Finance appears to have executed an exit scam, stealing roughly $4 million of users’ funds through a smart contract loophole.
Blockchain security firm CertiK flagged the incident on March 26, alerting Crypto Twitter of a price slippage on the project and the disappearance of its social media accounts. Kokoma’s website has also gone offline, with an error page popping up whenever users try to access it.
CertiK disclosed that the deployer of the KOKO token, address 0x41BE, executed an attack on the smart contract of a wrapped Bitcoin token (cBTC). The attacker then reset the reward speed, halted the borrow function, and turned the implementation contract into a malicious one.
Another address, 0x5a2d, approved the malicious cBTC smart contract to spend the 7010 sonne wrapped BTC (WBTC).
Since the implementation contract was already set to the malicious cBTC contract, the attacker called a command to transfer the sonne WBTC to the address 0x5C8d.
The final transaction saw address 0x5C8d swap the 7010 sonne WBTC to 141 wBTC, gaining approximately $4 million in profit.
On 26 March 2023, Kokomo Finance conducted an exit scam and stole ~$4 million in user funds.
Details Below https://t.co/BEPwfahblz
— CertiK Alert (@CertiKAlert) March 26, 2023
Following the rug pull, KOKO, Kokoma’s native token, plunged by more than 95% from $0.020 to $0.00065.
Kokoma Finance recently went live on Optimism and Arbitrum as an open-source and non-custodial lending protocol for users to trade wBTC, Ether (ETH), Tether (USDT), USD Coin (USDC), and DAI.
Barely 24 hours after its launch, the platform had $2 million in total value locked (TVL), mostly in wBTC, according to data from DefiLlama. The exit scam dropped the platform’s TVL to just over $64,000.
Meanwhile, Kokoma Finance is not the only DeFi protocol to rug pull users in recent times. Earlier this month, the developers of Arbitrum-based decentralized exchange ArbiSwap suddenly removed over $130,000 from the project’s liquidity pool, leaving users scratching their heads and counting losses.
The post Optimism DeFi Protocol Kokomo Finance Rug Pulls Users for $4 Million appeared first on CryptoPotato.
—
Blog powered by G6
Disclaimer! A guest author has made this post. G6 has not checked the post. its content and attachments and under no circumstances will G6 be held responsible or liable in any way for any claims, damages, losses, expenses, costs or liabilities whatsoever (including, without limitation, any direct or indirect damages for loss of profits, business interruption or loss of information) resulting or arising directly or indirectly from your use of or inability to use this website or any websites linked to it, or from your reliance on the information and material on this website, even if the G6 has been advised of the possibility of such damages in advance.
For any inquiries, please contact [email protected]
