BIGO token exploit.

BIGO token was hacked, root cause is auto burn functionality.

In “transfer” function, “_autoBurn” function that decreases pancake pair balance is called. “burnAmount” can be set by sending a few ETH to BIGO token.

Hacker exchanged a huge amount of DOGE to BIGO and set “burnAmount”, then called “transfer”.

After that he exchanged all BIGO to DOGE, as BIGO balance of pancake pair was decreased, he was able to gain almost all DOGE in pancake pair. He gained $18k.

I think auto burn functionality is really dangerous.


Posted

in

by

Tags:

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *