View source for YULI AI Token Contract Pool Spot Price Manipulation Exploit

{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/yuliaitokencontractpoolspotpricemanipulationexploit.php}}
{{Unattributed Sources}}

[[File:Binancesecurity.jpg|thumb|Binance Security Image]]The YULI AI smart contract, launched on July 22, 2025, was exploited due to a vulnerability that allowed a price manipulation attack. According to TenArmor, the attacker manipulated the YULIAI/USDT V3 pool’s spot price to repeatedly sell YULIAI tokens and extract more USDT from the contract, resulting in an estimated loss of $78.8K. The identity of the project’s creators remains unknown, and it is unclear whether an investigation is ongoing or if affected users will receive any support.<ref name="tenarmortweet-21174" /><ref name="attacktransaction-21175" /><ref name="exploiteraddress-21176" /><ref name="exploiterfunding-21177" /><ref name="yuliaitoken-21178" /><ref name="yuliaicreation-21179" />

== About YULI AI ==
The YULI AI smart contract was first created on July 22nd, 2025.

== The Reality ==
Unfortunately, the smart contract was vulnerable to a price manipulation attack.

== What Happened ==
The YULI AI smart contract on Binance Smart Chain was exploited through a price manipulation attack causing a $78.8K loss.
{| class="wikitable"
|+Key Event Timeline - YULI AI Token Contract Pool Spot Price Manipulation Exploit
!Date
!Event
!Description
|-
|July 22nd, 2025 3:25:26 AM MDT
|YULI AI Smart Contract Created
|The YULI AI smart contract is initially created on BSC.
|-
|August 5th, 2025 8:20:04 PM MDT
|Initial Attack Wallet Funding
|The attacker's wallet is initially funded.
|-
|August 13th, 2025 2:02:17 AM MDT
|Attack Transaction Occurred
|The attack transaction is accepted by the Binance smart chain.
|-
|August 13th, 2025 8:24:00 PM MDT
|TenArmor Posts Attack Alert
|TenArmor made a post on Twitter/X about the attack.
|}

== Technical Details ==
TenArmor provided the following analysis: "It appears to be a price manipulation attack, where the contract 0x8262 relies on the YULIAI/USDT V3 pool's spot price for selling YULIAI tokens. After manipulating the pool's YULIAI price, the attacker obtained more USDT from the victim contract by repeated selling YULIAI tokens."

== Total Amount Lost ==
TenArmor reports that there was "an approximately loss of $78.8K".

The total amount lost has been estimated at $79,000 USD.

== Immediate Reactions ==
The incident was reported on by TenArmor.

== Ultimate Outcome ==
It is unclear whether any resolution will be possible.

== Total Amount Recovered ==
There are no public details about who is behind this project.

There do not appear to have been any funds recovered in this case.

== Ongoing Developments ==
It is unclear if an investigation is underway or any assistance will be available for affected users.
== Individual Prevention Policies ==
{{Prevention:Individuals:Placeholder}}

{{Prevention:Individuals:End}}

== Platform Prevention Policies ==
{{Prevention:Platforms:Placeholder}}

{{Prevention:Platforms:End}}

== Regulatory Prevention Policies ==
{{Prevention:Regulators:Placeholder}}

{{Prevention:Regulators:End}}

== References ==
<references><ref name="tenarmortweet-21174">[https://twitter.com/TenArmorAlert/status/1955817707808432584 TenArmor - "Our system has detected that #YULIAI and an unverified contract 0x8262 on #BSC was attacked, resulting in an approximately loss of $78.8K." - Twitter/X] (Accessed Sep 23, 2025)</ref>

<ref name="attacktransaction-21175">[https://bscscan.com/tx/0xeab946cfea49b240284d3baef24a4071313d76c39de2ee9ab00d957896a6c1c4 Attack Transaction - BSCScan] (Accessed Sep 23, 2025)</ref>

<ref name="exploiteraddress-21176">[https://bscscan.com/address/0x26f8bf8a772b8283bc1ef657d690c19e545ccc0d Exploiter Address - BSCScan] (Accessed Sep 23, 2025)</ref>

<ref name="exploiterfunding-21177">[https://bscscan.com/tx/0xa86f06790a01e3a72af4cdc9331b3bfc84273daaadc296a2c371ce60610d5eed Exploiter Address Funding - BSCScan] (Accessed Sep 23, 2025)</ref>

<ref name="yuliaitoken-21178">[https://bscscan.com/token/0xdf54ee636a308e8eb89a69b6893efa3183c2c1b5 YULI AI Token - BSCScan] (Accessed Sep 23, 2025)</ref>

<ref name="yuliaicreation-21179">[https://bscscan.com/tx/0x0a5786a1448ede4d46868598f0cbd5b2144b067e6b9387f3385e3cca72da32dc YULI AI Token Creation - BSCScan] (Accessed Sep 23, 2025)</ref></references>