Astrology NFT Project ‘Lucky Star Currency’ Raises Over $1m
Astrology-themed NFT project Lucky Star Currency (LSC) has committed more than $1 million in withdrawal scams, according to an Oct. 9 report from blockchain security firm Certic.
The project's deployment account called the ‘withdrawToken' function on both the NFTMrgerge and AdwardCenter contracts, withdrawing more than $1 million in LSC. These tokens are converted into Binance USD (BUSD) stablecoin and sent to another account.
#CertiKSkynet Alert
We can confirm exit fraud on @AstrAstrol75591 LSC token
Bsc: 0x2b3559c3DBdB294cbb71f2B30a693F4C6be6132d
EOA 0x9Ef has withdrawn LSC tokens from the Reward Center contract. Tokens sold for $1.1mhttps://t.co/sy7vFfqhf5
— CertiKAlert (@CertiKAlert) October 9, 2023
Lucky Star Currency is a project that focuses on NFTs and claims to be based on astrology. The contracts include a reward center and an NFT marketplace. It is sold on the Chinese crypto investment market. The team promotes the project on X (formerly Twitter) under the username @AstrAstrol75591. It also has a Telegram channel. As of October 9, the project's website and user interface are offline.
Prior to the suspicious carpet, Lucky Star Currency was heavily promoted on Chinese news app Tutiao and question-and-answer forum Zhuhu.
At 02:52 AM UTC, BNB Smart Chain address 0x9Ef72Ee68a7c841986A0C60e0FDbAE4e27446mail has removed more than 1.6 million LSC from the AwardCenter contract for Lucky Star Currency. In the second transaction, an additional 1.4 million LSC was withdrawn from the NFTMerge contract of the project. After draining their funds, the attacker redelivered more than $1 million in BUSD via pancake swap and then sent them to account 0x23f8c805306Bf27AB8bf3cEbEce4B778acfFd896. This account has been receiving BUSD from various sources for the past 82 days, indicating that more than one fraud may be depositing funds.
According to Sertic, the compromised contracts were listed by Telegram as the project's official contracts.
In addition, the blockchain data shows that the attacker's account is the contract operator for the reward center.
Related: Chinese DeFi Protocol WDZD Swap Exploited For $1.1M: CertiK
The company that promoted the project said it has an office in Shenzhen, China.
Carpets from Chinese projects have become a recurring problem in the Web 3 space. Centralized cryptocurrency exchanges are illegal in the country. As a result, users who deposit centralized entities into the Chinese protocol may have their funds confiscated by the police.
More than $100 million was lost when China-based MultiChain Protocol withdrew all of its users' funds in an attacker's account. The group said the police had arrested its CEO, but victims still want answers about what happened to their money and how they can get it back.
