Four.Meme Hacked, $174,000 Stolen via Smart Contract Vulnerability

Four.Meme, a meme coin launchpad on the BNB Chain, was targeted by hackers on Tuesday morning, leading to the suspension of its token liquidity pool on PancakeSwap. The attack was identified by blockchain security firm SlowMist, which revealed that the exploit was executed through a vulnerability in the platform’s smart contract. The attacker managed to bypass transfer restrictions and manipulate the liquidity pool pricing, allowing them to steal funds.

The hacker first acquired a small amount of Four.Meme tokens before the official launch using the “0x7f79f6df” function. Instead of holding or transferring them traditionally, they sent the tokens to a non-existent PancakeSwap Pair address. This allowed the attacker to create the pair address themselves and add liquidity at an incorrect price, manipulating the system and stealing funds from the liquidity pool. The stolen funds, totaling over $174,000, were then moved across several wallets to obfuscate the trail and laundered through PancakeSwap’s $BROCCOLLI 3 contract.

In response to the breach, Four.Meme halted the launch function and issued an emergency statement, promising to compensate affected users and provide a damage submission form to collect relevant information. A few hours later, the platform announced that operations had resumed after conducting security checks, asking affected users to file their claims. The platform has seen a significant increase in activity since its creation, with a total of 74,607 unique tokens being launched.

This incident marks the second time in the last two months that Four.Meme has experienced an attack. The previous attack saw $183,000 stolen due to a different vulnerability that allowed a bad actor to manipulate liquidity on PancakeSwap. Both attacks highlight the ongoing risks facing decentralized platforms, especially those handling large amounts of liquidity in meme coin markets. The platform has taken steps to prevent future incidents, but the vulnerabilities in smart contracts and liquidity mechanisms remain a concern for the industry.