CashVerse BNB To AdaCash DepositBNB Sandwich Attack - Revision history

Azoundria: Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/cashversebnbtoadacashdepositbnbsandwichattack.php}} {{Unattributed Sources}} CashVerse
2025-03-20T22:39:07Z

Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/cashversebnbtoadacashdepositbnbsandwichattack.php}} {{Unattributed Sources}} thumb|CashVerse<ref name="slowmisttweet-19259" /><ref name="cashversehomepage-19260" /><ref name="cashversetokenabout-19261" /><ref name="cashverselasttweet-19262" /><ref name="cashverseresponsetweet-19263" /><ref name="cashverseresponsetweet-19264" /><ref name="tenarmortweet1-19265" /><r..."

New page
{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/cashversebnbtoadacashdepositbnbsandwichattack.php}}
{{Unattributed Sources}}

[[File:Cashverse.jpg|thumb|CashVerse]]<ref name="slowmisttweet-19259" /><ref name="cashversehomepage-19260" /><ref name="cashversetokenabout-19261" /><ref name="cashverselasttweet-19262" /><ref name="cashverseresponsetweet-19263" /><ref name="cashverseresponsetweet-19264" /><ref name="tenarmortweet1-19265" /><ref name="cashverselinktree-19266" />

== About CashVerse ==
CashVerse is a platform designed to provide users with multiple streams of passive income through the cryptocurrency market. The project focuses on transparency, integrity, and utility, aiming to offer safe and long-term investment opportunities. By offering services like staking, token holding, and access to a range of crypto tools, CashVerse strives to keep users updated and informed about market trends. The platform also includes a portfolio tracker, real-time crypto news, and marketing services, helping users stay connected to the latest developments in the crypto space.

One of the key features of CashVerse is its use of in-house tools and services, including "Crypt2Date," a platform for crypto research, and the "SignalBot," a Telegram bot that provides security-checked investment signals across multiple chains. Users can personalize their signal preferences, from more speculative options to the most secure recommendations. The platform encourages a community-focused approach to financial freedom, emphasizing the importance of embracing market dips for long-term rewards. CashVerse aims to build a strong and engaged community while offering a safe and reliable environment for crypto enthusiasts to invest and earn passive income.

CashVerse differentiates itself by leveraging lessons learned from its predecessor, FortuneCash, and incorporating innovative features like strategic taxation and staking mechanisms. The platform uses a unique tax structure of 8% buy/sell/transfer tax, which is split between 4% for spots and 4% for ADACash/SOLCash. Additionally, the launch date is mentioned, which is set for July 5th, 2024. CashVerse aims to create a comprehensive ecosystem with multiple avenues for earning passive income, such as staking and token holding, while driving value to its associated tokens. The platform encourages users to join its community and benefit from its extensive partnerships.

== The Reality ==
The CashVerse smart contract had vulnerabilities.

The depositBNB function in contract 0x2d70 lacks access control and proper slippage protection, allowing anyone to swap BNB in the contract for ADAcash. The attacker exploited this via a sandwich attack.

Additionally, there's a minor issue: the transfer function of ADAcash contains multiple swaps, all lacking slippage protection. By exploiting this, the attacker reclaimed swap fees and maximized profits by sandwiching the WBNB/ADA swap."

== What Happened ==
The CashVerse smart contract was exploited, resulting in an estimated loss of $107.9k USD.
{| class="wikitable"
|+Key Event Timeline - CashVerse BNB To AdaCash DepositBNB Sandwich Attack
!Date
!Event
!Description
|-
|January 14th, 2025 5:29:00 AM MST
|Last Tweet From CashVerse
|The last tweet from CashVerse on theit Twitter/X account, advertising a trading bot for users.
|-
|February 7th, 2025 12:59:25 PM MST
|Original Transaction Out Of Gas
|The original attack transaction by the individual who discovered the vulnerability ran out of gas.
|-
|February 7th, 2025 12:59:28 PM MST
|Transaction Frontrunning Done
|The transaction was front-run. This transaction by the front-runner is successful.
|-
|February 7th, 2025 8:11:00 PM MST
|TenArmor Publishes Analysis
|TenArmor posts a public analysis of the exploit transaction, revealing that the original attack was frontrun due to running out of gas. The vulnerability was found in the depositBNB function of contract 0x2d70, which lacked access control and slippage protection, allowing the attacker to exploit it via a sandwich attack. Additionally, the transfer function of ADAcash contained multiple swaps with no slippage protection, enabling the attacker to reclaim swap fees and maximize profits.
|-
|February 8th, 2025 12:17:00 AM MST
|SlowMist Security Alert
|"SlowMist Security Alert We detected potential suspicious activity related to @CashverseLLC. As always, stay vigilant!"
|-
|February 8th, 2025 12:19:00 AM MST
|CashVerse Response Tweet
|CashVerse responds to SlowMist "that was very Strange Yesterday" and it "[s]eemed Like a flashloan Attack or idk.. didnt make any sense".
|-
|February 8th, 2025 12:33:00 AM MST
|TenArmor Tags CashVerse
|TenArmor responds to their original tweet with a tag for CashVerse's Twitter/X account. Now they manage to get CashVerse's attention.
|-
|February 8th, 2025 12:39:00 AM MST
|CashVerse Defensive Tweet
|"Also WE Here since 3 years.. 2 years with almost No Volume very profitable scam"
|-
|February 8th, 2025 1:53:00 AM MST
|Untitled Event
|
|}

== Technical Details ==
"Our system has detected a suspicious sandwich attack involving an old unverified contract 0x2d70 and #ADAcash @adacashbsc on #BSC, resulting in an approximately loss of $107.9K.

It seems that the original attack transaction was frontrun due to running out of gas.

The depositBNB function in contract 0x2d70 lacks access control and proper slippage protection, allowing anyone to swap BNB in the contract for ADAcash. The attacker exploited this via a sandwich attack.

Additionally, there's a minor issue: the transfer function of ADAcash contains multiple swaps, all lacking slippage protection. By exploiting this, the attacker reclaimed swap fees and maximized profits by sandwiching the WBNB/ADA swap."

== Total Amount Lost ==
TenArmor reports "resulting in an approximately loss of $107.9K."

The total amount lost has been estimated at $108,000 USD.

== Immediate Reactions ==
It does not appear that CashVerse has not posted on their Twitter account since January 2024. However, CashVerse replied and engaged with multiple smart contract auditing firms including SlowMist and TenArmor.

== Ultimate Outcome ==
CashVerse has never made any public announcements about the exploit or what happened. It is unclear what may have happened behind the scenes.

== Total Amount Recovered ==
The total amount recovered is unknown.

What funds were recovered? What funds were reimbursed for those affected users?

== Ongoing Developments ==
What parts of this case are still remaining to be concluded?
== Individual Prevention Policies ==
{{Prevention:Individuals:Placeholder}}

{{Prevention:Individuals:End}}

== Platform Prevention Policies ==
{{Prevention:Platforms:Placeholder}}

{{Prevention:Platforms:End}}

== Regulatory Prevention Policies ==
{{Prevention:Regulators:Placeholder}}

{{Prevention:Regulators:End}}

== References ==
<references><ref name="slowmisttweet-19259">[https://twitter.com/SlowMist_Team/status/1888125078560452989 SlowMist - "SlowMist Security Alert We detected potential suspicious activity related to @CashverseLLC. As always, stay vigilant!" - Twitter/X] (Accessed Mar 20, 2025)</ref>

<ref name="cashversehomepage-19260">[https://cashverse.io/ CashVerse Homepage] (Accessed Mar 20, 2025)</ref>

<ref name="cashversetokenabout-19261">[https://cashverse.io/cashverse-token About CashVerse Token] (Accessed Mar 20, 2025)</ref>

<ref name="cashverselasttweet-19262">[https://twitter.com/CashverseLLC/status/1879143699273154714 CashVerse - "C2D Tradingbot is here for YOU! Trade tokens on ETH, BSC, ARB, BASE, and MATIC Monitor profits directly in Telegram Start trading today" - Twitter/X] (Accessed Mar 20, 2025)</ref>

<ref name="cashverseresponsetweet-19263">[https://twitter.com/CashverseLLC/status/1888125502050689264 CashVerse - "Yeah that was very Strange Yesterday. Seemed Like a flashloan Attack or idk.. didnt make any sense" - Twitter/X] (Accessed Mar 20, 2025)</ref>

<ref name="cashverseresponsetweet-19264">[https://twitter.com/CashverseLLC/status/1888130490986647884 CashVerse - "Also WE Here since 3 years.. 2 years with almost No Volume very profitable scam" - Twitter/X] (Accessed Mar 20, 2025)</ref>

<ref name="tenarmortweet1-19265">[https://twitter.com/TenArmorAlert/status/1888063017163624929 TenArmor - "Our system has detected a suspicious sandwich attack involving an old unverified contract 0x2d70 and #ADAcash @adacashbsc on #BSC, resulting in an approximately loss of $107.9K." - Twitter/X] (Accessed Mar 20, 2025)</ref>

<ref name="cashverselinktree-19266">[https://linktr.ee/cashverse CashVerse Linktree] (Accessed Mar 20, 2025)</ref></references>