Project name: Safemoon
Project type: Token
Date of exploit: Mar 28th, 2023
Asset loss: $8.9M
Vulnerability: Access control
Date of audit report publishing: May 3rd, 2021
Conclusion: Out of Audit Scope
Safemoon is a token project where fees will be taken and added as liquidity in the token transfer process.
On Mar 28th, 2023, the Safemoon token contract was attacked, leading to a loss of $8.9M. The attacker took advantage of the public burn function and drained funds from the LP pool.
The vulnerability lies in the public burn function in the newly upgraded token contract, which CertiK has not audited.