Developers of decentralized exchange (DEX) Swaprum have drained $3 million in ether (ETH) tokens from the protocol in an apparent rugpull, otherwise known as an exit scam.
The exchange, launched on the Ethereum layer-2 network Arbitrum, offers high farming rewards, low swapping fees, and potential earnings of up to 100% annual percentage yield (APY).
Blockchain security firm Peckshield flagged the incident on Friday, disclosing that approximately 1,628 ETH, worth roughly $3 million, was drained from Swaprum’s liquidity pools. Onchain data shows that the exit scam was executed in the late hours of Thursday.
The team first removed the liquidity provided for SAPR, the platform’s native token, on the exchange and sold the assets for ETH. The funds were subsequently transferred from Arbitrum to Ethereum and then moved to cryptocurrency mixer Tornado Cash.
A deeper analysis by blockchain security platform Beosin revealed that the deployer of the Swaprum smart contract added a backdoor function to enable the theft of liquidity pool tokens staked by users. The deployer used the add() function to drain the pool for their profit.
Beosin further explained that the Swaprum team had upgraded the normal liquidity collateral reward contract to another containing backdoor functions.
“The backdoor function add() will transfer LP tokens from the contract to the _devadd address. By querying the _devadd address, it will return the ‘Swaprum:Deployer’ address. The Swaprum: Deployer uses the stolen LP tokens in the previous step to remove liquidity,” the security platform stated.
As a result of the rugpull, SAPR lost almost all of its value. At writing time, the token was trading at $0.000022 with a 24-hour trading volume of $83, signifying a 99% decline from its previous price of $0.147 before the rugpull, according to data from CoinMarketCap.
In addition, the social media accounts of Swaprum on Twitter, GitHub, and Telegram have been deleted. Only the platform’s website was active at press time.
Meanwhile, Swaprum’s rugpull is one of the largest exit scams on the Arbitrum network. The incident has overthrown that of DeFi protocol Hope Finance, which suffered a $2 million exploit in February after a Nigerian hacker allegedly deployed a fake router on the platform.
The post Swaprum DEX Drained in $3M Crypto Rugpull appeared first on CryptoPotato.
Blog powered by G6
Disclaimer! A guest author has made this post. G6 has not checked the post. its content and attachments and under no circumstances will G6 be held responsible or liable in any way for any claims, damages, losses, expenses, costs or liabilities whatsoever (including, without limitation, any direct or indirect damages for loss of profits, business interruption or loss of information) resulting or arising directly or indirectly from your use of or inability to use this website or any websites linked to it, or from your reliance on the information and material on this website, even if the G6 has been advised of the possibility of such damages in advance.
For any inquiries, please contact [email protected]