Data leak [loss] $2M+

Tweet by YazanXBT

2023-07-28 [vendor] Pond0x bug
Primary Source ↗
Financial Loss $2.2M (2,200,000 USD)

Incident Details

Traders hoping to get in on the next big memecoin eagerly snapped up a token called Pond0x, a Pepe the Frog-branded memecoin launched by Pauly0x. Pauly0x is Jeremy Cahen, a crypto personality best known for his creation of CryptoPhunks, NotLarvaLabs, and involvement in the Ryder Ripps lawsuit.However, serious flaws in the Pond0x contract resulted in traders losing at least $2.2 million as people discovered that anyone could transfer coins belonging to other people. People quickly began rushing to steal coins from one another.Pauly0x responded by blaming the traders who bought and sold the tokens, and spent the following day variously posting on Twitter that he was teaching people a lesson, that it wasn’t his fault that people lost money, and suggesting that the flaw was part of a bigger plan for the project. “No one stole your tokens lol. The contract is literally designed as such,” he wrote to angry traders accusing him of a rug pull. He added to the website a message reading, “GREED KILLS”.

Total loss estimated at $2,200,000.

Technical Details

Initial Attack Vector
Exit scam / rug pull
Vendor / Product
Pond0x bug

Timeline

  1. 2023-07-28 Breach occurred
  2. 2023-07-28 Publicly disclosed