Poolz Finance, a cross-chain crowdfunding launchpad for Web3 projects, has been exploited for US$390,000 worth of digital assets on the Binance Smart Chain and Polygon blockchains, according to an alert by blockchain security firm PeckShield on Wednesday.

See related article: Bitcoin breaks US$26,000 as inflation cools in February

Fast facts

  • The exploit occurred due to a “classic arithmetic overflow issue, which is exploited to drain funds from the contract,” according to PeckShield’s Twitter post.
  • PeckShield first spotted the exploit by observing a repetitive transaction pattern by the same sender in the token vesting smart contract.
  • Poolz Finance is a decentralized crowdfunding platform, which allows Web3 projects to raise funding via initial dex offerings. To date, 96 projects have secured funding via Poolz.
  • Poolz Finance said they will create a new smart contract, restore the US$200,000 worth of liquidity on PancakeSwap from the company treasury and has warned users not to trade the Poolz token. 
  • Following the exploit, Poolz’s governance token (POOLZ) fell 96% to US$0.15, in the 24 hours to 7:00 p.m. in Hong Kong, according to CoinMarketCap.

See related article: Banks are bringing systemic risks to crypto, says Circle’s Disparte