DIP Token Code Flaw Leads to $111K USDC Loss
- A missing return statement in the DIP token’s code resulted in a loss of approximately $111,098 in USDC.
- The flaw allowed double transfers via Pancakeswap, contributing to over 2,150 incidents logged by Slowmist this year.
- DeFi has lost over $1 billion to exploits in the current year, highlighting the need for audits.
- The exploit involved manipulating the automated market maker price by calling specific functions like `skim(router)` and `sync()`.
- No flash loans or oracle tricks were needed for this exploit—just a gap in the token’s code logic.
The missing return statement in DIP token’s code allowed unintended payouts during trades routed through Pancakeswap, leading to significant losses without complex hacking techniques. This incident underscores the importance of thorough audits as DeFi protocols face increasing vulnerabilities.
With more than $37 billion lost across over two thousand incidents this year, ensuring robust smart contract security is critical to safeguarding decentralized financial assets.(Source)
