Leaderboard
1319All-time rank
B
BBXToken
Mar 20, 2025
$12K
Lost
$12K
Recovered
$0
Net loss
$12K
Unrecovered0% recovered
BBXToken's transfer function includes a burn mechanism that transfers liquidity pool tokens to a dead address before calling sync(). An attacker exploited this to artificially manipulate PancakeSwap's pool reserves, creating an imbalance that allowed extraction of value from the pool.
How the exploit worked
View reproducible PoCPrice Manipulation.
Lost: 11902 BUSD
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Oracle Manipulation
- Technique
- Spot Price Manipulation
- Attribution
- Unknown
- Chains
BSC
Event timeline
- Mar 20, 2025Exploit executed — $12K drained via spot price manipulation
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)