Koko Finance Scam

    Today I'll dig into the little data Koko finance left in Optimism after doing a rug pull.

    Kokomo Finance Another DeFi Project in Optimism

    Although at this moment there isn't data regarding this project because all their sites had been deleted, according to DefiLllama Kokomo Finance was an open-source and non-custodial lending protocol on Optimism and Arbitrum.

    But it's seems that the Arbitrum response to this dApp was negative, with the holders of $KOKO being only 5 addresses suspected to be related to this project because everyone received $KOKO in the same transaction.

    But unfortunately this wasn't the case for the Optimism side where this project received some grade of attention and Uniswap-V3 opened a WETH-KOKO pool with 0xa849db56d7446207a2a4aa6ca3bb17aa3a7c41b9 as their smart contract for the LP.

    What Happened?

    On March 26 the $KOKO token had plummeted 95% in value in a matter of minutes, also everything related to Kokomo Finace was deleted.

    According to Cointelegraph:

    CertiK said the deployer of KOKO attacked the smart contract code of a wrapped Bitcoin token, cBTC, by resetting the reward speed and pausing the borrow function.

    After that, an address beginning with “0x5a2d..” approved the new cBTC smart contract to spend over 7000 Sonne Wrapped Bitcoin (So-WBTC).

    The Smart Contract attacked was 0x41be327a34d5d2f0855ff7e4fb3f6f1748b3310f and from the first _Set Borrow Paused Method and above is when the attack happens.

    This is what happened to $KOKO after the attack:

    db_img
    Loading...
    • Data from $KOKO price starts at March 26, 2023, thanks to the activity from the Uniswap v3 Pool.
    • After reaching a spike in Price of $0.04 the value of $KOKO quickly decreases reaching their lowest price at 16:00 of March 26, which doesn't change too much after the following hours.