BYToken

Jun 4, 2026

Target

DeFi

Classification

Protocol Logic

Technique

Permissionless triggerAutoBurn Reserve Manipulation

Attribution

Unknown

Chains

Event timeline

1. Jun 4, 2026
   Exploit executed — $87K drained via permissionless triggerautoburn reserve manipulation
2. Attributed to Unknown
3. Recovery status Unrecovered 0%

Sources

• github.com/SunWeb3Sec/DeFiHackLabs/blob/main/src/test/2026-06/BYToken_exp.sol

Data credits

• DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)

Related incidents

Apr 22, 2018

BCBeauty Chain

$900M

Apr 1, 2026

Drift Trade

$295M

Feb 9, 2024

PlayDapp

$290M