1 year ago
The deployer relationship for LSC drained implicit $1 cardinal successful tokens from the project, past swapped them to BUSD utilizing PancakeSwap.
The astrology-themed NFT task Lucky Star Currency (LSC) has performed an exit scam for implicit $1 million, according to an October 9 study from blockchain information steadfast Certik.
The project’s deployer relationship called the ‘withdrawToken’ relation connected some the NFTMerge and AdwardCenter contracts, removing implicit $1 cardinal successful LSC from them. These tokens were past swapped for Binance USD (BUSD) stablecoin and sent to different account.
— CertiK Alert (@CertiKAlert) October 9, 2023Lucky Star Currency is simply a task that focuses connected NFTs and claims to beryllium founded by astrologists. Its contracts see an Award Center and NFT Marketplace. It is marketed towards the Chinese crypto concern market. The squad promotes the task connected X (formerly Twitter) nether the username @AstrAstrol75591. It besides has a Telegram channel. As of October 9, the project’s website and idiosyncratic interface are offline.
Before the alleged rug, Lucky Star Currency was heavy promoted connected the Chinese quality app Toutiao and Q&A level Zhihu.
At astir 02:52 a.m. UTC, BNB Smart Chain code 0x9Ef72Ee68a7c841986A0C60e0FDbAE4e27446Deb removed implicit 1.6 cardinal LSC from the AwardCenter declaration for Lucky Star Currency. In a 2nd transaction, an further 1.4 cardinal LSC was drained from the project’s NFTMerge contract. After draining funds, the attacker swapped them for implicit $1 cardinal successful BUSD via Pancake swap and past sent them to relationship 0x23f8c805306Bf27AB8bf3cEbEce4B778acfFd896. This relationship has been receiving BUSD from assorted sources for the past 82 days, implying that determination whitethorn beryllium much than 1 scam depositing funds to it.
According to Certik, the contracts that were drained person been listed connected Telegram arsenic the project’s authoritative contracts.
Admin Telegram station stating the authoritative addresses for LSC contracts 'NFTMerge' and 'AwardCenter.' Source: Certik.In addition, blockchain information shows that the attacking relationship is the deployer for the AwardCenter contract.
Related: Chinese DeFi protocol WDZD Swap exploited for $1.1M: CertiK
The institution that promoted the task claimed to person an bureau successful Shenzen City, China.
Lucky Star Currency office, Shenzhen, China. Source: Certik, TelegramRug-pulls from Chinese projects person go a recurring occupation successful the Web3 space. Running a centralized cryptocurrency speech is amerciable successful the country. Because of this, users who deposit to a Chinese protocol that has centralized elements whitethorn hazard having their funds confiscated by police.
Over $100 cardinal were mislaid successful July erstwhile the China-based Multichain protocol drained each of its users' funds into an attacker’s account. The squad alleges that constabulary person arrested their CEO, but victims inactive search for answers arsenic to what happened to their funds and however they tin beryllium reimbursed.
English (US) 