SlowMist(@SlowMist_Team):🚨SlowMist TI Alert🚨 💸 CashCowCoin Loss: ~117.4k USD 🔍 Root Cause: The unverified trading router implementation contract `0x428774...a9ac` has a flawed `sell()` flow. After the PancakeSwap Router completes the CCC→WBNB swap and the Pair outputs WBNB, the proxy calls the CCC token's privileged function `0xb20a0b6f` to transfer the full amount of newly received (post-tax) CCC directly out of the Pair to the dead address, then invokes `Pair.sync()`. This burns the sell-side CCC while permanently retaining the reduced WBNB reserve, enabling repeated reserve draining via 80 iterative sell cycles. 📌 Attacker EOA: `0x7977bdeee3a79dc85cc18739692e796b5d2513c4` 📌 Attack Contract: `0x7738b4d7c25e9a7092ae1ab402343b20340daeaf` 📌 Exploited Proxy: `0xf523224c6171f81c54b93f474ed4c78de91241c7` 📌 Vulnerable Implementation: `0x4287742e50fad6d3351000fd31632412ab29a9ac` 📌 Victim Pair (CCC/WBNB): `0x1dbe9458a6840784d5defd62c6b71386100097c0` 📌 CCC Token: `0xb9b845f718c32f37e8af8b887ae4eec816c93ccc` 📌 Profit Splitter Contract (holds stolen funds): `0xbabf70e515ae71a2177e624994a68d10c61d7a9f` 📌 Splitter Owner: `0xca882106194ede1a5014c0fa1532234d084b72a9` Powered by https://t.co/Mz5jOnx997 Tx:

2026.08.28 06:08

🚨SlowMist TI Alert🚨 💸 CashCowCoin Loss: ~117.4k USD 🔍 Root Cause: The unverified trading router implementation contract `0x428774...a9ac` has a flawed `sell()` flow. After the PancakeSwap Router completes the CCC→WBNB swap and the Pair outputs WBNB, the proxy calls the CCC token's privileged function `0xb20a0b6f` to transfer the full amount of newly received (post-tax) CCC directly out of the Pair to the dead address, then invokes `Pair.sync()`. This burns the sell-side CCC while permanently retaining the reduced WBNB reserve, enabling repeated reserve draining via 80 iterative sell cycles. 📌 Attacker EOA: `0x7977bdeee3a79dc85cc18739692e796b5d2513c4` 📌 Attack Contract: `0x7738b4d7c25e9a7092ae1ab402343b20340daeaf` 📌 Exploited Proxy: `0xf523224c6171f81c54b93f474ed4c78de91241c7` 📌 Vulnerable Implementation: `0x4287742e50fad6d3351000fd31632412ab29a9ac` 📌 Victim Pair (CCC/WBNB): `0x1dbe9458a6840784d5defd62c6b71386100097c0` 📌 CCC Token: `0xb9b845f718c32f37e8af8b887ae4eec816c93ccc` 📌 Profit Splitter Contract (holds stolen funds): `0xbabf70e515ae71a2177e624994a68d10c61d7a9f` 📌 Splitter Owner: `0xca882106194ede1a5014c0fa1532234d084b72a9` Powered by Tx:

Forward to community