Digital Asset
Intelligence
Security Incident

CashCowCoin Smart Contract Vulnerability: $117.40K Reported Loss

·Historical incident record

Incident Overview

CashCowCoin’s unverified trading router implementation contract had a flawed sell() flow. After the PancakeSwap Router completed the CCC→WBNB swap, the proxy called a privileged token function to transfer post-tax CCC from the Pair to the dead address and invoked Pair.sync(). This burned the sell-side CCC while permanently retaining the reduced WBNB reserve, enabling repeated draining of the pool’s WBNB through about 80 iterative sell cycles.

Sources & References

Original incident referencehttps://x.com/SlowMist_Team/status/2093219144896557483 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Avici

    Attack methodSmart Contract Vulnerability
    Reported loss$ 500,859.22
  2. Incident date
    Target

    Moonwell

    Attack methodPrice Manipulation
    Reported loss$ 8,700,000
  3. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 10,000
  4. Incident date
    Target

    $TENDRIL

    Attack methodSmart Contract Vulnerability
    Reported loss$ 555000
  5. Incident date
    Attack methodUnknown
    Reported lossNot disclosed