RocketSwap

Amount Lost: $869,000.00
Funds Returned: $0.00
Category: Exchange (DEX)
Date: 2023-8-14

Quick Summary

RocketSwap, a DEX on Base chain, suffered an access control exploit on Aug 14, 2023, leading to a loss of 472 ETH, equivalent to 869,000 $USD.

Details of the Exploit

On Aug 14, 2023, RocketSwap, a decentralized exchange operating on the Base chain, fell victim to an access control exploit. The attacker managed to compromise the RocketSwap: Deployer EOA address, allowing them to seize LP tokens. After acquiring these tokens, the attacker removed liquidity and converted RCKT, WETH, and axlUSDC tokens to ETH, which were then bridged to the Ethereum Mainnet via Stargate Bridge.

Once on the Ethereum chain, the attacker used the funds to add liquidity along with a newly created fake token, LoveRCKT. Half of the liquidity with the fake token was already withdrawn as of August 15, 2023. The attack resulted in a total loss of approximately 472 ETH, worth around 869,000 $USD. RocketSwap's team confirmed that there was a brute force attack on their server where the private keys were stored, and subsequently shut down their Telegram and disabled comments.

Block Data Reference

Attacker Address:

https://basescan.org/address/0x96c0876F573e27636612CF306C9db072d2B13DE8

Malicious Transaction:

https://basescan.org/tx/0x25c11d664f89ef9237ecf2e8ff1f067821cb829694b184c7ee74e6d0a3f9bfba

Liquidity Removal Transactions:

https://basescan.org/tx/0x5dce5276d3a1d2286f7bf535634ccd99fa9909b2bf5bc0d6625d2660da50c5b5

https://basescan.org/tx/0x1a1d567e8c4b5db05f8b9ac1dc37cfea350cfd2529a3f5c5c86baa86a3179ada

Bridging Transaction:

https://basescan.org/tx/0x9b384f72d0817c99d2829c1226729de0c2ae29aa8ae7d32f1feaa6fc358de026

Funds Holder as of Aug 15, 2023:

https://etherscan.io/address/0x96c0876F573e27636612CF306C9db072d2B13DE8