View source for LIFE Protocol Price Not Updated When Sold Price Manipulation

{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/lifeprotocolpricenotupdatedwhensoldpricemanipulation.php}}
{{Unattributed Sources}}

[[File:Lifeprotocol.jpg|thumb|LIFE Protocol Logo/Homepage]]LIFE Protocol is a digital asset ecosystem that grows in value with every transaction, driven by an algorithmic pricing model and a 20-level referral system designed to reward community engagement and incentivize network growth. It also uses a reserve-backed liquidity model to maintain price stability. However, a critical flaw in the smart contract—where the token price (currentPrice) was only updated during buy transactions and not during sells—allowed attackers to manipulate the price by inflating it through repeated buys and then selling at the outdated, higher rate. This vulnerability led to a $51,000 exploit, first identified by Tikkala Security and later analyzed by CertiK’s AI Agent, with confirmation from SlowMist. Despite the severity of the incident, LIFE Protocol has not issued any public response or recovery plan for affected users. The website currently states that buying and selling are paused for a “security upgrade and maintenance,” with no clear timeline for resumption.<ref name="slowmisttweet-19798" /><ref name="lifeprotocolhomepage-19799" /><ref name="lifeprotocoltweet-19800" /><ref name="bsctransaction1-19801" /><ref name="tenarmoralerttweet-19802" /><ref name="bsctransaction2-19803" /><ref name="certikaiagenttweet-19804" /><ref name="tikkalaresearchtweet-19805" /><ref name="bsctransaction3-19806" /><ref name="lifeprototwitterx-19807" /><ref name="jeanphillippebea-19808" /><ref name="tenarmortweet-20899" /><ref name="lifeprotocolsmartcontract-20900" /><ref name="lifeprotocolsmartcontractcreation-20901" /><ref name="lifeprotocoltweet2-20902" /><ref name="lifeprotocoltweet3-20903" /><ref name="bitangelstweet-20904" />

== About LIFE Protocol ==
LIFE Protocol is a digital asset ecosystem designed to grow in value with every transaction. Central to its appeal is an algorithmic pricing model that increases the token's price with each purchase, ensuring that holders benefit from continuous financial growth as the user base expands. The protocol positions itself as a long-term investment opportunity, emphasizing both value appreciation and network-driven rewards.

A key feature of LIFE Protocol is its 20-level referral system, which allows users to earn passive income through both direct and indirect connections. This structure not only incentivizes community growth but also maximizes user engagement by offering increasing returns as the network deepens. Through this affiliate program, participants can introduce just two people to unlock a broad and potentially lucrative earning structure.

To maintain price stability and investor confidence, LIFE employs an algorithmic liquidity model backed by a reserve fund. This ensures that token buybacks can be executed as needed, reinforcing sustainability.

== The Reality ==
Unfortunately, the Life Protocol smart contract contained a critical flaw where the currentPrice variable was updated only during buy transactions but not during sell transactions. This oversight could allow manipulating the token price by buying heavily to inflate it, then selling tokens at the outdated, higher price.

== What Happened ==
LIFE Protocol suffered an attack resulting in a loss exceeding $51,000, according to SlowMist.
{| class="wikitable"
|+Key Event Timeline - LIFE Protocol Price Not Updated When Sold Price Manipulation
!Date
!Event
!Description
|-
|January 16th, 2025 9:06:15 AM MST
|Life Protocol Smart Contract Created
|The Life Protocol smart contract is created.
|-
|April 26th, 2025 12:43:10 PM MDT
|First Exploit BSC Transaction
|The first exploit transaction takes over $15k of BSC-USD.
|-
|April 26th, 2025 12:43:13 PM MDT
|Second Exploit BSC Transaction
|The second exploit transaction takes over $11k of BSC-USD from the Life Protocol smart contract.
|-
|April 26th, 2025 5:13:00 PM MDT
|Tikkala Security Tweets
|Tikkala Security appears to be the first to notice the suspicious transactions and identified a critical flaw in Life Protocol’s contract: the ‘currentPrice’ was updated during buys but not after sells. This oversight allowed attackers to inflate the token price by buying heavily, then sell at the artificially high fixed rate, resulting in a $26,000 loss from the protocol. The two flagged transactions demonstrate this exploit in action.
|-
|April 26th, 2025 7:50:00 PM MDT
|CertiK AI Agent Tweets
|CertiK's AI Agent posts a public warning and analysis of the suspicious second transaction, highlighting a potential exploit involving repeated self-trades and flash loans to artificially inflate Life Protocol's token price. The flagged transaction shows multiple buy() operations with stablecoins causing incremental price increases, suggesting price manipulation for profit. The analysis urges projects to implement trade frequency limits, monitor abnormal trading behavior, and strengthen DEX pricing mechanisms to prevent such exploits.
|-
|April 26th, 2025 8:04:00 PM MDT
|Ten Armor Posting Tweet
|Ten Armor posts an announcement with details of the transactions, reporting $26k in impact so far.
|-
|April 26th, 2025 11:48:32 PM MDT
|Third Exploit BSC Transaction
|A malicious transaction on the Binance Smart Chain takes $20k BSC-USD.
|-
|April 26th, 2025 11:59:00 PM MDT
|Ten Armor Posting Tweet
|Ten Armor posts an updated tweet about the second attack.
|-
|April 27th, 2025 1:17:00 AM MDT
|SlowMist Announcement Tweet
|SlowMist posts a security alert and reports the loss as $51k, with a link to LifeProtocol's Twitter/X account.
|-
|April 27th, 2025 12:29:00 PM MDT
|Token Purchase Promotion
|Life Protocol posts on Twitter/X to encourage more purchases of their $LIFE token. The protocol is evidently still online and promoting itself on Twitter/X.
|-
|May 8th, 2025 10:46:00 AM MDT
|Life Protocol Assurances
|Life Protocol returns with a tweet about how investors are "always backed by an immutable USDT reserve you can verify on-chain". This is followed shortly by multiple other tweets, about how selling fees adds 10% to the reserve, information about exit mechanics being available, 100% collateral backing and low fees, and how you can exit safely anytime.
|-
|May 29th, 2025 4:06:00 PM MDT
|Bitcoin2025 Conference
|The team posts about Bitcoin2025, suggesting that they are among those attending the conference.
|}

== Technical Details ==
The exploit stemmed from a flaw in the Life Protocol smart contract where the token price (currentPrice) was updated only during buy() operations but not after sell() operations. This allowed attackers to artificially inflate the token price by repeatedly buying large amounts, causing incremental price increases, and then selling tokens at the outdated, higher fixed price since the sell() function failed to update the price accordingly. This mismatch enabled attackers to profit by selling overpriced tokens, manipulating the price through repeated trades without proper price adjustment after sales.

== Total Amount Lost ==
SlowMist reports that the total amount lost was $51k.

The total amount lost has been estimated at $51,000 USD.

== Immediate Reactions ==
The incident was first noticed and publicly flagged by Tikkala Security, who identified the root cause and alerted the Life Protocol team and community via social media. They provided detailed technical insights, pointing out that the currentPrice was updated during buys but not during sells, allowing attackers to exploit the pricing logic. Shortly after, CertiK's AI Agent also responded by issuing a public warning and detailed analysis of a suspicious second transaction, identifying flash loan use and repeated self-trades to manipulate token prices. The incident was later noted by SlowMist.

== Ultimate Outcome ==
It does not appear that Life Protocol has posted any announcements on Twitter/X

The Life Protocol website currently displays a message "Buying and selling is on pause for security upgrade and maintenance.".

== Total Amount Recovered ==
Life Protocol does not appear to have prepared any public plans to make users whole.

There do not appear to have been any funds recovered in this case.

== Ongoing Developments ==
The message remains active on the Life Protocol website and it is unclear when the buying and selling of the token will resume.
== Individual Prevention Policies ==
{{Prevention:Individuals:Placeholder}}

{{Prevention:Individuals:End}}

== Platform Prevention Policies ==
{{Prevention:Platforms:Placeholder}}

{{Prevention:Platforms:End}}

== Regulatory Prevention Policies ==
{{Prevention:Regulators:Placeholder}}

{{Prevention:Regulators:End}}

== References ==
<references><ref name="slowmisttweet-19798">[https://twitter.com/SlowMist_Team/status/1916391258664174045 SlowMist - "We have detected that @LifeProto is being continuously exploited, with losses exceeding $51K. As always, stay vigilant!" - Twitter/X] (Accessed May 28, 2025)</ref>

<ref name="lifeprotocolhomepage-19799">[https://lifeprotocol.io/ Life Protocol Homepage] (Accessed May 28, 2025)</ref>

<ref name="lifeprotocoltweet-19800">[https://twitter.com/LifeProto/status/1916560225190183256 Life Protocol - "Ready to buy? Jump in now" - Twitter/X] (Accessed May 28, 2025)</ref>

<ref name="bsctransaction1-19801">[https://bscscan.com/tx/0x74b33c524df438fef28ceab4cf2a38238296d854f02055bf883fd66daf242236 Thirst Transaction Takes $20k BSC-USD From Life Protocol - BSCScan] (Accessed May 28, 2025)</ref>

<ref name="tenarmoralerttweet-19802">[https://twitter.com/TenArmorAlert/status/1916371501802262708 TenArmorAlert - "another exploit again, @LifeProto Do something!" - Twitter/X] (Accessed May 28, 2025)</ref>

<ref name="bsctransaction2-19803">[https://bscscan.com/tx/0x487fb71e3d2574e747c67a45971ec3966d275d0069d4f9da6d43901401f8f3c0 First Transaction Takes $15,114.79k BSC-USD - BSCScan] (Accessed May 28, 2025)</ref>

<ref name="certikaiagenttweet-19804">[https://twitter.com/CertikAIAgent/status/1916309067733340582 CertiK AI Agent - "A suspicious transaction flagged involving repeated self-trades—potential exploit using flash loans to manipulate token prices!" - Twitter/X] (Accessed May 28, 2025)</ref>

<ref name="tikkalaresearchtweet-19805">[https://twitter.com/TikkalaResearch/status/1916269436035862898 Tikkala Research - "Hi @LifeProto @JeanPhilippeBea You may need to take a look these two" - Twitter/X] (Accessed May 28, 2025)</ref>

<ref name="bsctransaction3-19806">[https://bscscan.com/tx/0x787dda04a7347d98b3e0293b3d19f7db06fa6a1ef923e36bc92bfef54bb564e7 Second Transaction Takes $11,288.97 BSC-USD - BSCScan] (Accessed May 28, 2025)</ref>

<ref name="lifeprototwitterx-19807">[https://twitter.com/LifeProto Life Protocol - Twitter/X] (Accessed May 28, 2025)</ref>

<ref name="jeanphillippebea-19808">[https://twitter.com/JeanPhilippeBea Jean-Philippe Beaudet - Founder Of Life Protocol - Twitter/X] (Accessed May 28, 2025)</ref>

<ref name="tenarmortweet-20899">[https://twitter.com/TenArmorAlert/status/1916312483792408688 Ten Armor - "It appears that attacks have been active recently. Here's another hack. Our system has detected that #LIFE Protocol @LifeProto on #BSC was attacked, resulting in an approximately loss of $26K." - Twitter/X] (Accessed Aug 5, 2025)</ref>

<ref name="lifeprotocolsmartcontract-20900">[https://bscscan.com/address/0x19b2834f99fb9eb4164cb5b49046ec207f894197 Life Protocol Smart Contract - BSCScan] (Accessed Aug 5, 2025)</ref>

<ref name="lifeprotocolsmartcontractcreation-20901">[https://bscscan.com/tx/0xe4b7206779f051bc72923f118c3f1e872ff59f452e27136f6b189ee3c18abebf Life Protocol Smart Contract Creation - BSCScan] (Accessed Aug 5, 2025)</ref>

<ref name="lifeprotocoltweet2-20902">[https://twitter.com/LifeProto/status/1916545378658447362 Life Protocol - "Pro tip: Always verify token address on BscScan before buying: 0x19B2834f99Fb9eB4164CB5b49046Ec207F894197." - Twitter/X] (Accessed Aug 5, 2025)</ref>

<ref name="lifeprotocoltweet3-20903">[https://twitter.com/LifeProto/status/1920520572196257990 Life Protocol - "You’re always backed by an immutable USDT reserve you can verify on-chain." - Twitter/X] (Accessed Aug 5, 2025)</ref>

<ref name="bitangelstweet-20904">[https://twitter.com/BitAngels/status/1928211447131295890 BitAngels - "The BitAngels team is having an absolute blast at BITCOIN2025! Catch us at the @btcstartuplab and @TokenizeCon events tonight." - Twitter/X] (Accessed Aug 5, 2025)</ref></references>