Skip to main content
AVOID.NET

Paraluni Masterchef

avoid.net/paraluni-masterchef18/100·82% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·4nrNnT…eFLr

Summary

Paraluni is a metaverse DeFi yield-farming protocol deployed on Binance Smart Chain (BSC). On March 13, 2022, its MasterChef smart contract was exploited via a reentrancy vulnerability in the depositByAddLiquidity function, resulting in approximately $1.7 million in losses. The attacker laundered the proceeds through Tornado Cash and never returned funds despite a public appeal from the Paraluni team.

Connected Entities

3 entities · 60 linked investigations
Organizations
Ethereum64Binance45Paraluni Masterchef
Relationships
  • Binancementioned withEthereum(65%)
  • Paraluni Masterchefmentioned withEthereum(70%)
  • Paraluni Masterchefmentioned withBinance(65%)
Have evidence about Paraluni Masterchef?

Timeline(4 events)

13 March 2022

Paraluni MasterChef contract exploited via reentrancy attack. Approximately $1.7 million stolen using PancakeSwap flash loans and malicious ERC-20 tokens (UBT/UGT). Attack transaction: 0x70f367b9420ac2654a5223cc311c7f9c361736a39fd4e7dff9ed1b85bab7ad54.

CertiK, SlowMist, Halborn

13 March 2022

PeckShield publicly identifies the exploit and attacker address (0x94bc1d555e63eea23fe7fdbf937ef3f9ac5fcf8f) via Twitter alert.

PeckShield Twitter

13 March 2022

Attacker converts stolen USDT/BUSD to BNB, cross-chains approximately 235 ETH to Ethereum via cBridge, then deposits 660 ETH into Tornado Cash across 12 transactions.

SlowMist Incident Analysis

14 March 2022

Paraluni team publicly offers to treat the exploit as a white-hat disclosure and proposes a reward in exchange for return of funds. Attacker does not respond.

Halborn / CoinCodeCap
Provenance & Audit Trail

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (1 event). 7 of 11 cited source URLs have an Internet Archive snapshot.

model: claude-sonnet-4-6

generated: 5/4/2026, 2:54:50 AM

last updated: 8/29/2026, 1:34:18 AM

6 views

avoid.net — verified advice for a post-truth world