Leaderboard
966All-time rank
B

BFB

Jul 8, 2026

$198K
Lost
$198K
Recovered
$0
Net loss
$198K
Unrecovered0% recovered

BFB token's custom price-defense deflationary logic could be triggered by zero-value transferFrom calls without per-transaction limits. An attacker used flash loans to repeatedly invoke the burn function ~151 times in one transaction, destroying BFB reserves and draining WBNB from the PancakeSwap liquidity pool.

Target
DeFi
Classification
Token & Share Accounting
Technique
Incorrect Share Accounting
Attribution
Unknown
Chains
BSC

Event timeline

  1. Jul 8, 2026
    Exploit executed — $198K drained via incorrect share accounting
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents