Early Tuesday, the BNB Chain-based meme coin launchpad, Four.Meme, fell victim to a cyberattack, leading to the suspension of its token liquidity pool on the PancakeSwap platform. This security breach was initially uncovered by the blockchain security company SlowMist, which disclosed that the exploit was executed through a flaw in the platform’s smart contract.
According to SlowMist, the malefactor acquired a minimal amount of tokens before the official launch through a specific function of the Four.Meme smart contract. These tokens were then dispatched to an as-yet nonexistent PancakeSwap Pair address, setting the stage for the exploit. This maneuver enabled the attacker to sidestep transfer limitations and tamper with the liquidity pool’s pricing, as detailed by the smart contract audit firm QuillAudits.
This incident marks the second attack on Four.Meme in two months, with a previous exploit leading to a loss of $183,000. This earlier breach also involved manipulation of liquidity on PancakeSwap via a distinct vulnerability.
In the recent exploit, the attacker deployed several contracts to facilitate their scheme after withdrawing 69 BNB from a FixedFloat hot wallet three days prior. The stolen assets, totaling approximately $174,000, were eventually laundered through multiple transactions, including swaps via PancakeSwap’s contracts.
In response to this breach, Four.Meme promptly halted its launch function and issued an emergency statement, committing to compensating affected users and initiating a process to gather relevant information through a damage submission form. Operations were resumed after a thorough security review, with the platform urging impacted users to submit their claims.
The attacks on Four.Meme underscore the persistent risks decentralized platforms face, especially within the meme coin sector, which often draws significant liquidity. This vulnerability is not isolated to meme coins alone; for instance, zkLend, a decentralized money lending protocol on the Starknet blockchain, also experienced a major security breach last month, resulting in the loss of $9.5 million in crypto assets.
Despite efforts to bolster security measures, these incidents highlight the challenges decentralized finance (DeFi) platforms confront in safeguarding against sophisticated cyber threats. As the sector continues to grow, developing robust defense mechanisms against such attacks remains a critical priority for ensuring users’ trust and the overall integrity of the decentralized finance ecosystem.