Security Incident
CashCowCoin Smart Contract Vulnerability: $117.40K Reported Loss
CashCowCoin’s unverified trading router implementation contract had a flawed sell() flow.
- Reported loss
- $ 117,400
- Attack category
- Smart Contract Vulnerability
Incident Overview
After the PancakeSwap Router completed the CCC→WBNB swap, the proxy called a privileged token function to transfer post-tax CCC from the Pair to the dead address and invoked Pair.sync(). This burned the sell-side CCC while permanently retaining the reduced WBNB reserve, enabling repeated draining of the pool’s WBNB through about 80 iterative sell cycles.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.