Leaderboard
1158All-time rank
A

AES

Dec 7, 2022

$62K
Lost
$62K
Recovered
$0
Net loss
$62K
Unrecovered0% recovered

AES, a deflationary token on BSC, was exploited through abuse of its skim function. The attacker repeatedly sent AES tokens to the AES-USDT pair to break the pool balance, then called skim to extract surplus tokens.

Each cycle burned additional AES tokens, allowing profitable conversion of small token amounts into large USDT payouts.

How the exploit worked

View reproducible PoC

Business Logic Flaw & FlashLoan price manipulation.

Lost: $60k

Source: DeFiHackLabs (SunWeb3Sec)

Target
DeFi
Classification
Token & Share Accounting
Technique
Rounding Error
Attribution
Unknown
Chains
BSC

Event timeline

  1. Dec 7, 2022
    Exploit executed — $62K drained via rounding error
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents