Leaderboard
1318All-time rank
LT
LABUBU Token
Dec 10, 2024
$12K
Lost
$12K
Recovered
$0
Net loss
$12K
Unrecovered0% recovered
LABUBU token's transfer function allowed the same address to be both sender and receiver, enabling balance inflation. The attacker borrowed tokens via a PancakeSwap V3 flash loan, repeatedly executed this flawed transfer to compound their balance, then swapped through multiple chains and mixed the proceeds.
How the exploit worked
View reproducible PoCLogic Flaw.
Lost: 17.4 BNB (~ $12,048)
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Token & Share Accounting
- Technique
- Donation Attack
- Attribution
- Unknown
- Chains
Binance
Event timeline
- Dec 10, 2024Exploit executed — $12K drained via donation attack
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)