Grizzifi

On August 13, 2025, Grizzifi, a BSC-based staking protocol, was exploited via a flaw in its reward mechanism. The attacker created multiple controlled wallets to amplify the milestoneReward through the harvestHoney function, then collected additional rewards via collectRefBonus.

The root cause was that milestone calculations were based on total cumulative investments rather than active investments.