Digital Asset
Intelligence
Security Incident · BSC Ecosystem

Carson Flash Loan Attack: $145.00K Reported Loss

·Historical incident record

Incident Overview

The BSC ecology Carson was attacked and lost about $145,000. At present, the price of Carson tokens has dropped by 96%, and the attacker has exchanged the stolen assets for 600 BNB and transferred them to Tornado Cash. The attacker repeatedly called the swapExactTokensForTokensSupportingFeeOnTransferTokens function in the 0x2bdf...341a contract (not open-source) through flash loans, swapped for BUSD and burned Carson in the pair, then repeatedly inflated the price of Carson for profit.

Sources & References

Original incident referencehttps://twitter.com/BeosinAlert/status/1684393202252402688?s=20 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    DefiLabs

    Attack methodRug Pull
    Reported loss$ 1,600,000
  2. Incident date
    Target

    IEGT

    Attack methodRug Pull
    Reported loss$ 1,140,000
  3. Incident date
    Target

    Palmswap

    Attack methodFlash Loan Attack
    Reported loss$ 900,000
  4. Incident date
    Attack methodRug Pull
    Reported loss$ 680,000
  5. Incident date
    Target

    Pond0x

    Attack methodContract Vulnerability
    Reported loss$ 2,200,000