REKT AUTOPSY
ALL CASES|Scan Wallet →
CASE FILE #09
Rug PullEthereumDEX

Dipex

January 9, 2021

CAUSE OF DEATH

Approveandcall exploit. Liquidity locked, tokens unlocked, exit executed.

TOTAL LOST
$17K
CHAIN
Ethereum
TYPE
Rug Pull
📄

FORENSIC REPORT

TIME OF DEATH

Time of death: January 9, 2021, approximately 0000 hours UTC. The specimen, identified as Dipex DEX token, was found expired in the Ethereum mainnet with acute liquidity hemorrhaging. Initial examination of the transaction chain reveals a three-act tragedy staged with surgical precision by the contract deployer.

CAUSE OF DEATH ANALYSIS

Cause of death analysis: The deployer executed a textbook approveAndCall() exploit with the precision of someone who'd practiced this before. Transaction 0x5b6f330b2180b53cc6655babf018d8ddceba6b8fba81c6c6471ec60add2462ff shows the fatal injection: approveAndCall() was invoked with an external wallet address and an addedValue parameter embedded in the call data. This function allowed the attacker to bypass standard approval mechanisms and transfer tokens directly to their controlled address. The external wallet's token balance increased accordingly—the classic sign of value evacuation. Within hours, those tokens were liquidated across the DEX in transaction 0x954e5fbc0fc96bd83773b11e4005761a4e347a4734a75467163d83f31ce0b4d4. The liquidity that was supposedly 'locked' in transaction 0x6eead116e0ceccea3f1cf2ccaf29bc0e15487d4fa8055dfb77415a6440365254 proved to be nothing more than theater.

CONTRIBUTING FACTORS

Contributing factors: The victim showed no defensive coding practices. There were no function guards, no access controls preventing the deployer from invoking approveAndCall() with arbitrary external addresses. The liquidity 'lock' was cosmetic—verified on the blockchain but architecturally useless once approveAndCall() could be weaponized. Early investors who checked the contract source code and saw 'locked liquidity' would have missed the vulnerability entirely. This is why dead tokens don't ask good questions before dying.

VICTIM IMPACT

Victim impact: $16,957 in total capital loss. The amount is modest by modern rug pull standards, but let's be clear: that represents real people who believed in a DEX that would never actually function. Liquidity providers lost everything. Early traders who purchased at peak naiveté lost everything. The deployer converted victim capital into personal winnings with zero friction.

PATHOLOGIST'S NOTE

Pathologist's note: I've been doing this long enough to recognize the signature. This wasn't a failed project or a technical accident—this was a smash and grab wearing a business plan as a disguise. The approveAndCall() exploit is ancient by crypto standards, yet it continues to harvest victims like a predator that found a watering hole. The liquidity lock created false security theater while the real trap door remained open the entire time. Dipex never had a pulse; it was always just a corpse waiting for an autopsy appointment. File closed.

"Dipex flatlined on January 9th after deployer weaponized approveAndCall() to redirect locked tokens to an external wallet. Classic rug choreography: add liquidity, lock it, steal it, dump it. Victim count: $16,957 lighter."

Share on 𝕏
Were you holding this? Get your wallet autopsy →

Data from De.Fi REKT Database