Breach Our Smart Contract and Claim $500,000!

The Foom Heist Challenge is on! We're Foom, creating a decentralized lottery using ZK-proofs. We think our code is solid but want the community to give it a real test. We’ve deployed a smart contract on Base L2 with around $500,000 in $FOOM tokens. If you can exploit it and drain the funds, they’re yours. No theory, just cold hard cash.

Yo, I did it. Where do I send my findings?

Big shoutout to DK27ss for the awesome analysis! Check this out: https://github.com/DK27ss/FoomClub-1.6M-PoC. No further details needed, it’s all laid out.

Seems like you guys are just new accounts. Did haophd actually pull off the heist? Got an address where you sent the funds?

Hey henry_of_skalitz, the funds got swapped to ETH. They’re sitting at this address: https://etherscan.io/address/haophd.eth. Some folks are calling it a malicious exploit on social media. We need to clear that up to protect the protocol’s image.

Can you move 1 ETH from that address to another one? Just curious.