Summary
JUDAO is a deflationary BEP-20 token deployed on BNB Smart Chain and trading primarily on PancakeSwap, with a self-described 'T3 JUDAO' iteration launched in January 2026 and a separate 'JUDAO 3.0' variant announced as part of the JuCoin ecosystem via NordCore Labs. On April 28, 2026, the token's liquidity pool was drained of approximately $228,000 through a flash loan exploit that exploited a double-reserve-sync vulnerability in its custom transfer logic. The project's parent exchange JuCoin was independently flagged by on-chain investigator ZachXBT as 'sketchy' in March 2025, and JUDAO 3.0 has no verifiable audit, no identified founding team, and no smart contract security review on record.
Connected Entities
1 entities · 10 linked investigationsTimeline(6 events)
2025-03-28
ZachXBT flags JuCoin as 'sketchy' in a public warning about Token2049 platinum sponsors, citing ownership changes, regulatory pivots, and lack of team transparency. JuCoin subsequently announced JUDAO 3.0 as part of its ecosystem.
Mitrade / ZachXBT on X2025-09-17
JuCoin's native JU token collapses approximately 75% within hours, falling from ~$24 to ~$6. JuCoin cites 'external liquidity factors' without providing substantive transparency.
AiInvest2026-01-15
T3 JUDAO (contract: 0xf55DFF7898930a2D28cDbC39D615b1624ac86888) deploys on BNB Smart Chain. The token reaches its all-time high of $0.00170 the following day.
Coinranking2026-04-28
Flash loan exploit drains the JUDAO liquidity pool. Attacker (0x5384B34C74024d6563B323351a4bBFA18432161B) flash-loans 2,295,723 USDT from Lista DAO: Moolah, exploits a double-sync vulnerability in JUDAO's _update() function, and extracts approximately $205,259 USDT plus 36 BNB (~$227,600 total). ExVulSec issues the first public alert on X.
ExVulSec on X / Verichains2026-04-28
Verichains security firm publishes a technical post-mortem identifying the root cause as incorrect reserve accounting from a double sync() call in JUDAO's transfer function.
Verichains2026-04-28
MEXC News reports on the JUDAO exploit, noting the pool had an alleged TVL of $22.3 million at the time of the attack.
MEXC NewsDecision Log
- hash: 7TfYUPiRkkmJEFbuyiWZC5jW1f7fmVwsFKSBt5WWzLnX
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-sonnet-4-5
generated: 5/4/2026, 1:51:10 AM
last updated: 5/30/2026, 12:21:50 PM
avoid.net — verified advice for a post-truth world