Incident case file
Sign in to watchRWC Token Flash Loan Burn-Tax Manipulation
Incident date Sep 21, 2026Last updated Oct 8, 2026
3 views
ClosedBNB ChainFlash loan + tokenomics manipulationCluster: RWC-BSC-2026-09
Estimated loss
$109.5K
Affected users
Number of affected users is not confirmed
Group joining is coming soon.
Investigation
95%
Facts and investigation
Ledger
Attacker
Funding EOA: 0x7a674349b84975726B948c4F5054AaDA5e419edb | Exploiter contract: 0xa5B02a184f2bc91234c5A3ab821F59DF7fB076d3 | Self-destructed attack contract: 0x4E0Af13Be91f953a1f7dD9B43011A09e9F452Ef8
Funds moved to
Net profit of $39,964.07 withdrawn to funding EOA 0x7a674349b84975726B948c4F5054AaDA5e419edb after flash loan repayment
Linked
RWC token contract: 0x1337120D4aA3a7F4b5BC7C38f742aD62d4A8bf5c. Pool: PancakeSwap V2 RWC-BSC-USD (0x053207705669538a2b3851BCD1279572C0f55E40). Fee-recipient wallets: 0xDe2f6153F49E3134b88e98E3e86C0Ae0411CC11B (company) and 0x911EA5a98fb8F238FFCB86c8a531d69Afc7b4CDe (platform). Flash loan of 2,495,286 USDT sourced from Lista DAO: Moolah.
Chronology
1 beatOn September 21, 2026, an attacker took a 2,495,286 USDT flash loan from Lista DAO's Moolah lending market and repeatedly exploited RWC's automatic sell-tax/burn mechanism (AutoSwapAndDistribute) across roughly 15 cycles to progressively skew the PancakeSwap RWC/USDT pool ratio in their favor. After repaying the flash loan, the attacker realized a net profit of $39,964.07, extracted to the original funding EOA. The attack transaction (0x9c919da34696425913f32587f00d2838031a8726a2c5ddfa39e33a45b36e6427) was flagged publicly by TenArmor's on-chain monitoring system the same day.
Sources and coverage
Victim testimonies
No testimonies yet.
+ Add my testimony → (coming soon)