Leaderboard
922All-time rank
A
ATM
Jun 3, 2026
$243K
Lost
$243K
Recovered
$0
Net loss
$243K
Unrecovered0% recovered
On June 4, 2026, ATM token on BSC was exploited for $243K via improper loop control in automatic swap-on-transfer mechanism. Contract was designed to convert 20% of transfers to BSC-USD, but flaw allowed repeated triggering beyond standard limits.
How the exploit worked
View reproducible PoCHidden transferFrom Auto-Swap Drain.
Lost: ~$243,543 USDT
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Protocol Logic
- Technique
- Swap Logic Flaw
- Attribution
- Unknown
- Chains
BSC
Event timeline
- Jun 3, 2026Exploit executed — $243K drained via swap logic flaw
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)