- Amount Lost: $504,217.00
- Funds Returned: $0.00
- Category: Token
- Date: 2023-7-18
Quick Summary
BNO Pool was exploited due to incorrect reward calculation, resulting in a loss of 504,217 $USD.
Details of the Exploit
The BNO pool, which supports both ERC20 and NFT staking, fell victim to an exploit. The attacker exploited an incorrect reward calculation issue and was able to drain the pool for 504,217 $USD. The exploit was executed in two transactions. In the first transaction, the attacker drained over 700,000 $BNO tokens from the pool. The second transaction drained an additional 700,000 $BNO tokens, which were subsequently sold on PancakeSwap for $USDT.
Block Data Reference
Attacker Address:
https://bscscan.com/address/0xA6566574eDC60D7B2AdbacEdB71D5142cf2677fB
Funds Holder Address: https://bscscan.com/address/0xdc109426972ae14d5b3d7e91b47d42ff1fd3c8cc
Malicious Transaction:
https://bscscan.com/tx/0x33fed54de490797b99b2fc7a159e43af57e9e6bdefc2c2d052dc814cfe0096b9
https://bscscan.com/tx/0x16d75e421ebf7a21737b6c5d7cea1c5274d315b95a1d5db5841fd7194876cc31
Malicious Contract Address:
https://bscscan.com/address/0xd138b9a58d3e5f4be1cd5ec90b66310e241c13cd
Proof Links: