Arbitrum's Swaprum DEX Steals $3M, SAPR Token Crashes 100%
Swaprum Disappears With $3M
PeckShield, an on-chain Analysis company, made the discovery of the theft on the Arbitrum network on Friday. On its exchange, the Swaprum team elected to remove the liquidity that had been given against the platform’s native coin. Following that, the team sold the tokens against ETH, which resulted in a substantial drop in the price of Swaprum (SAPR) tokens. As a result, the remaining tokens that were held by investors — who were unaware of the scam — ended up being completely worthless.
This devious maneuver has left in its wake a staggering loss of approximately 1,628 ETH — equivalent to $3 million in user deposits — adding to the growing dismay surrounding the safety and reliability of crypto platforms. What the crypto space calls to be a “rug pull”, the Swaprum team later transferred the funds to Ethereum where they laundered it through Tornado Cash, a notorious ETH mixer service that masks the transaction trail in order to puzzle authorities from tracking the flow of funds.
Read More: Do Kwon’s $437K Bail In Question As Prosecutors Fight Back
Recommended Articles
Crypto Telegram Channels List 2023 [Updated]
Must Read
Crypto Presale Projects For 2023 To Invest; Updated List
Must Read
Explained: What is Layer 0 in Blockchain? Layer Zero Crypto Examples
Must Read
Top Crypto Marketing Firms / Agencies 2023; Here’s Best Picks [Updated]
Must Read
Top 10 Web3 Games To Explore In 2023; Here List
Must ReadTeam Deletes Social Presence
The online footprint left by Swaprum was wiped off overnight as the team deleted their social media profiles across Twitter, Telegram, and GitHub. However, the project’s official website, which acted as the user interface for the underlying protocol, is still operational. In later investigations, security analysts working for Beosin discovered that the smart contract used by Swaprum contained a covert backdoor mechanism.
Swaprum on Arbitrum rugged for ~$3M.
The deployer of Swaprum used the add() backdoor function to steal LP tokens staked by users, then removed liquidity from the pool for profit.
One tx:https://t.co/qRXLhrAIqp pic.twitter.com/xf7vrciajN
— Beosin Alert (@BeosinAlert) May 19, 2023
The programmer behind Swaprum purposefully included the “add()” backdoor function in the code in order to steal LP (liquidity pool) tokens that were staked by users and subsequently remove liquidity from the pool in order to make a profit. And, although the now-defunct DEX advertises a positive vulnerability check from the auditing firm Certik, it remains unknown whether the certification is genuine or the blockchain firm overlooked the system’s inherent fatal flaw. As things stand, this malicious attempt marks one of the biggest exit scams to have recently been discovered on Ethereum’s Layer 2 network.
Also Read: Whales And Miners Offload Huge BTC Ahead Of Fed Chair Powell Speech