2023.02.27 - DIAMOND, SwapX, LaunchZone and HFI

The Hypernative platform identified a malicious contract deployment, accompanied by a sequence of attack transactions aimed at SwapX, DIAMOND, LaunchZone, and HFI on the BNB Chain, resulting in a substantial loss of funds exceeding $1M for affected users. The attacker exploited a vulnerability in the access control mechanism, leading to excessive user permissions that enabled them to manipulate the price of the DND tokens. The stolen funds were cashed out via Railgun.