Locked liquidity did not stop this $14 million crypto pool drain
The PancakeSwap pool for 79AU, 79thVault’s token, misplaced $14.35 million in USDT on Oct. 7 by way of two promoting wallets, in response to a Bitquery investigation printed Oct. 8.
Bitquery discovered that 79% of the pool’s liquidity-provider receipts had been burned. But a permission inside 79AU let tokens depart the pool with out fee. Those tokens have been then bought again for USDT, bypassing the necessity to redeem a liquidity receipt.
PancakeSwap’s V2 documentation describes LP tokens as receipts representing a supplier’s share of a pool. They are separate from the 2 property merchants change inside it.
The change’s liquidity guide describes odd redemption: a supplier selects a share to take away and receives each paired tokens. Sending receipts to an inaccessible deal with prevents their redemption. It does not disable swaps, since buying and selling exchanges the underlying property with out cashing in a liquidity place.
In PancakeSwap’s archived pair contract, separate operations deal with LP redemption, swaps and updating recorded reserves to match token balances. The swap operation checks token enter with out consuming LP receipts. The reserve-update operation reads balances from the underlying token contracts. Burning LP receipts does not rewrite these contracts’ stability guidelines or revoke a privileged deal with’s token permissions.
What remained uncovered
At 12:53 UTC on Oct. 8, Bitquery recognized two pull-authorized addresses: the deployer and a newly approved pockets. Read-only simulations from both allowed elimination of about 95% of the pool’s remaining 79AU. The read-only assessments moved no funds.
The identical snapshot confirmed one pockets holding the unburned 21% of LP receipts, with odd redemption rights over that share.
Establishing whether or not 79AU’s reported publicity has ended requires a recent test of that switch permission.
The publish Locked liquidity did not stop this $14 million crypto pool drain appeared first on CryptoSlate.
