Azoundria: More editing of the wiki article.

2023-05-30T21:10:03Z

Azoundria: Another 30 minutes complete.

2023-05-30T20:50:47Z

Another 30 minutes complete.

Show changes

Azoundria: Another 30 minutes complete.

2023-05-29T18:39:34Z

Another 30 minutes complete.

Show changes

Azoundria: Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/lwtokenpricemanipulationattack.php}} {{Unattributed Sources}} LW Token Price ChartLittle is known about the LW token. It doesn't appear to have an official website and there is limited references on social media, however it traded on PancakeSwap and was listed on several sites. On May 11th, the price spiked and rapidly fell due to a flash loan exploit. Approximately $48k..."

2023-05-19T18:01:40Z

Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/lwtokenpricemanipulationattack.php}} {{Unattributed Sources}} thumb|LW Token Price ChartLittle is known about the LW token. It doesn't appear to have an official website and there is limited references on social media, however it traded on PancakeSwap and was listed on several sites. On May 11th, the price spiked and rapidly fell due to a flash loan exploit. Approximately $48k..."

New page

{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/lwtokenpricemanipulationattack.php}}
{{Unattributed Sources}}

[[File:Lwtoken.jpg|thumb|LW Token Price Chart]]Little is known about the LW token. It doesn't appear to have an official website and there is limited references on social media, however it traded on PancakeSwap and was listed on several sites. On May 11th, the price spiked and rapidly fell due to a flash loan exploit. Approximately $48k worth of BNB was removed and brought to TornadoCash.

This is a global/international case not involving a specific country.<ref name="slowmisthackedarchive-10953" /><ref name="panewslabarchive-11037" /><ref name="panewslab-11038" /><ref name="peckshieldalerttwitter-11039" /><ref name="peckshieldalerttwitter-11040" /><ref name="bscscan-11041" /><ref name="bscscan-11042" /><ref name="metatrustalerttwitter-11043" /><ref name="metatrustalerttwitter-11044" /><ref name="bscscan-11045" /><ref name="bscscan-11046" /><ref name="bscscan-11047" /><ref name="hexagatetwitter-11048" /><ref name="dedotfisecuritytwitter-11049" /><ref name="tronweeklytwitter-11050" /><ref name="bscnewpairstwitter-11051" /><ref name="bscscan-11052" /><ref name="coinbrain-11053" /><ref name="blockchain-11054" /><ref name="top100token-11055" /><ref name="listingspy-11056" /><ref name="coinsgem-11057" /><ref name="poocoinapp-11058" />

== About LW Token ==
"The Warden system based on data from 1.000.000+ SmartContract, this contract has 95% to be a RugPull or HoneyPot!"

"The LW token on BSC was attacked, with a loss of 48,415 USDT, and the price of LW token plummeted by 69%. The attackers have transferred about 150 BNB to Tornado Cash."

"According to news from PANews on May 12, according to Paidun’s early warning and monitoring, the LW token on BSC was attacked, with a loss of 48,415 USDT, and the price of LW token plummeted by 69%. The attacker has transferred about 150 BNB to Tornado Cash."

"#MetaTrustAlert Our #MetaScout detected that $LW on BSC was attacked by the flashloan with a loss of ~48.4k $USD." "$LW is exploited (w/ 48,415 $USDT) $LW has dropped -69%"

"We identified an exploit on $LW token, on the PancakeSwap pair of $LW - $BUSD that resulted in an accumulated theft of ~$48k. The exploiting contract, utilizing a flashswap on the contract to conduct the attack, deployed around *10 hours* before the attack happened"

"The LW token on #BSC was attacked, with a loss of 48,415 USDT, and the price of $LW token plummeted by 69%. The attackers have transferred about 150 #BNB to Tornado Cash."

"It is a price manipulation attack.

In this attack, the marketAddr account has 173,272 $USDT, which is used to buy back the $LW and increase the price of the $LW.

The attacker first swapped $USDT for the $LW

The attacker triggered the buy-backs of $LW and increased the price of $LW

Finally, the attacker swapped $LW for the $USDT"

"The $LW exploiter has already transferred ~150 $BNB into Tornado Cash."

This is a global/international case not involving a specific country.

The background of the exchange platform, service, or individuals involved, as it would have been seen or understood at the time of the events.

Include:

* Known history of when and how the service was started.
* What problems does the company or service claim to solve?
* What marketing materials were used by the firm or business?
* Audits performed, and excerpts that may have been included.
* Business registration documents shown (fake or legitimate).
* How were people recruited to participate?
* Public warnings and announcements prior to the event.

Don't Include:
* Any wording which directly states or implies that the business is/was illegitimate, or that a vulnerability existed.
* Anything that wasn't reasonably knowable at the time of the event.
There could be more than one section here. If the same platform is involved with multiple incidents, then it can be linked to a main article page.

== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:

* When the service was actually started (if different than the "official story").
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.

== What Happened ==
The specific events of the loss and how it came about. What actually happened to cause the loss and some of the events leading up to it.
{| class="wikitable"
|+Key Event Timeline - LW Token Price Manipulation Attack
!Date
!Event
!Description
|-
|May 11th, 2023 3:00:00 AM MDT
|Added To DexKoala
|The trading pair is added to DexKoala. There are reportedly 6 token holders at this time.
|-
|May 11th, 2023 10:29:00 AM MDT
|LW Smart Contract Exploited
|The exploit transaction occurs on the Binance Smart Chain.
|-
|May 11th, 2023 8:35:00 PM MDT
|PeckShield Alert
|PeckShield alerts and posts an announcement on Twitter about the exploit.
|-
|May 11th, 2023 8:42:00 PM MDT
|TornadoCash Transfer Reported
|PeckShield reports that the exploiter has already cashed their 150 BNB token through TornadoCash.
|}

== Technical Details ==
This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?

== Total Amount Lost ==
The total amount lost has been estimated at $48,000 USD.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

== Immediate Reactions ==
How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?

== Ultimate Outcome ==
What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?

== Total Amount Recovered ==
There do not appear to have been any funds recovered in this case.

What funds were recovered? What funds were reimbursed for those affected users?

== Ongoing Developments ==
What parts of this case are still remaining to be concluded?
== Individual Prevention Policies ==
{{Prevention:Individuals:Placeholder}}

{{Prevention:Individuals:End}}

== Platform Prevention Policies ==
{{Prevention:Platforms:Placeholder}}

{{Prevention:Platforms:End}}

== Regulatory Prevention Policies ==
{{Prevention:Regulators:Placeholder}}

{{Prevention:Regulators:End}}

== References ==
<references><ref name="slowmisthackedarchive-10953">[https://web.archive.org/web/20230519161338/https://hacked.slowmist.io/en/ SlowMist Hacked - SlowMist Zone] (May 19, 2023)</ref>

<ref name="panewslabarchive-11037">[https://web.archive.org/web/20230519161338/https://www.panewslab.com/zh/sqarticledetails/4jq3adah.html 派盾：BSC上LW代币遭遇攻击，损失约5万美元 - PANews] (May 19, 2023)</ref>

<ref name="panewslab-11038">[https://www.panewslab.com/zh/sqarticledetails/4jq3adah.html 派盾：BSC上LW代币遭遇攻击，损失约5万美元 - PANews] (May 19, 2023)</ref>

<ref name="peckshieldalerttwitter-11039">[https://twitter.com/PeckShieldAlert/status/1656850634312925184 @PeckShieldAlert Twitter] (May 19, 2023)</ref>

<ref name="peckshieldalerttwitter-11040">[https://twitter.com/PeckShieldAlert/status/1656852216337268736 @PeckShieldAlert Twitter] (May 19, 2023)</ref>

<ref name="bscscan-11041">[https://bscscan.com/tx/0xd0dd0c8aa71860ff2d7fe6f9763892d936e31fb8c1aef01ec5ffbc947dbedbeb Binance Transaction Hash (Txhash) Details | BscScan] (May 19, 2023)</ref>

<ref name="bscscan-11042">[https://bscscan.com/address/0x4404de29913e0fd055190e680771a016777973e5 Address 0x4404de29913e0fd055190e680771a016777973e5 | BscScan] (May 19, 2023)</ref>

<ref name="metatrustalerttwitter-11043">[https://twitter.com/MetaTrustAlert/status/1656855782342938624 @MetaTrustAlert Twitter] (May 19, 2023)</ref>

<ref name="metatrustalerttwitter-11044">[https://twitter.com/MetaTrustAlert/status/1656905935670083590 @MetaTrustAlert Twitter] (May 19, 2023)</ref>

<ref name="bscscan-11045">[https://bscscan.com/tx/0xb846f3aeb9b3027fe138b23bbf41901c155bd6d4b24f08d6b83bd37a975e4e4a Binance Transaction Hash (Txhash) Details | BscScan] (May 19, 2023)</ref>

<ref name="bscscan-11046">[https://bscscan.com/tx/0x96b34dc3a98cd4055a984132d7f3f4cc5a16b2525113b8ef83c55ac0ba2b3713 Binance Transaction Hash (Txhash) Details | BscScan] (May 19, 2023)</ref>

<ref name="bscscan-11047">[https://bscscan.com/token/0x7b8c378df8650373d82ceb1085a18fe34031784f LW (LW) Token Tracker | BscScan] (May 19, 2023)</ref>

<ref name="hexagatetwitter-11048">[https://twitter.com/hexagate_/status/1657051084131639296 @hexagate_ Twitter] (May 19, 2023)</ref>

<ref name="dedotfisecuritytwitter-11049">[https://twitter.com/DeDotFiSecurity/status/1657169429434626050 @DeDotFiSecurity Twitter] (May 19, 2023)</ref>

<ref name="tronweeklytwitter-11050">[https://twitter.com/TronWeekly/status/1657430397016502273 @TronWeekly Twitter] (May 19, 2023)</ref>

<ref name="bscnewpairstwitter-11051">[https://twitter.com/BSCNewPairs/status/1656584978728206336 @BSCNewPairs Twitter] (May 19, 2023)</ref>

<ref name="bscscan-11052">[https://bscscan.com/address/0x7b8c378df8650373d82ceb1085a18fe34031784f GGGTOKEN | Address 0x7b8c378df8650373d82ceb1085a18fe34031784f | BscScan] (May 19, 2023)</ref>

<ref name="coinbrain-11053">[https://coinbrain.com/converter/bnb-0x7b8c378df8650373d82ceb1085a18fe34031784f/cad LW to CAD Price Converter & Calculator, Live Exchange Rate | CoinBrain] (May 19, 2023)</ref>

<ref name="blockchain-11054">[https://blockchain.coinmarketcap.com/token/bsc/0x7b8c378df8650373d82ceb1085a18fe34031784f https://blockchain.coinmarketcap.com/token/bsc/0x7b8c378df8650373d82ceb1085a18fe34031784f] (May 19, 2023)</ref>

<ref name="top100token-11055">[https://top100token.com/address/0x7b8c378df8650373d82ceb1085a18fe34031784f LW (LW) contract is 0x7b8c378df8650373d82ceb1085a18fe34031784f on BSC | Top100Token] (May 19, 2023)</ref>

<ref name="listingspy-11056">[https://listingspy.net/token/pancakeswap/lw-lw/0x7b8c378df8650373d82ceb1085a18fe34031784f LW (LW) token price, charts, analysis, scam check | ListingSpy] (May 19, 2023)</ref>

<ref name="coinsgem-11057">[https://coinsgem.com/token/0x7B8C378df8650373d82CeB1085a18FE34031784F LW (LW) token contract is 0x7B8C378df8650373d82CeB1085a18FE34031784F on binance - CoinsGEM] (May 19, 2023)</ref>

<ref name="poocoinapp-11058">[https://poocoin.app/tokens/0x7b8c378df8650373d82ceb1085a18fe34031784f PooCoin BSC Charts] (May 19, 2023)</ref></references>

← Older revision		Revision as of 15:10, 30 May 2023
Line 77:		Line 77:
	\|May 11th, 2023 8:10:15 PM MDT		\|May 11th, 2023 8:10:15 PM MDT
	\|First Exploit Transaction		\|First Exploit Transaction
	\|The first exploit transaction occurs<ref name="bscscan-11045" />. The smart contract makes repeated payments of 1 wei ~~to the~~ TBD need to explain it.		\|The first exploit transaction occurs<ref name="bscscan-11045" />. The smart contract makes repeated payments of 1 wei. TBD need to explain it.
	\|-		\|-
	\|May 11th, 2023 8:11:39 PM MDT		\|May 11th, 2023 8:11:39 PM MDT
Line 121:		Line 121:

	== Technical Details ==		== Technical Details ==



Line 144:		Line 145:

	[1]Exploit Transaction 2 - As Reported By Hexagate - BscScan		[1]Exploit Transaction 2 - As Reported By Hexagate - BscScan


	The attacker then transferred their gains into TornadoCash<ref name=":0" /><ref name="bscscan-11042" /><ref name=":1" />.		The attacker then transferred their gains into TornadoCash<ref name=":0" /><ref name="bscscan-11042" /><ref name=":1" />.

LW Token Price Manipulation Attack - Revision history

Azoundria: More editing of the wiki article.

Azoundria: Another 30 minutes complete.

Azoundria: Another 30 minutes complete.