Leaderboard
1180All-time rank
J
JB
Jun 19, 2026
$50K
Lost
$50K
Recovered
$0
Net loss
$50K
Unrecovered0% recovered
JB token gateway contract on BNB Chain was drained of 49,958 USDT on June 18-19, 2026. Attacker flash-borrowed WBNB, borrowed 70M USDT from Venus as collateral, and exploited poolTransferToDeadAndSync/tradeRouterBurnPool/poolRewardTransfer functions that sync the PancakeSwap pair after each manipulation, allowing repeated arbitrage of skewed reserves until USDT released exceeded costs.
Venus loan was repaid in the same transaction.
How the exploit worked
View reproducible PoCJB helper repeated cycle drains JB/USDT pair.
Lost: 49,958.06 USDT
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Oracle Manipulation
- Technique
- Spot Price Manipulation
- Attribution
- Unknown
- Chains
BSC
Event timeline
- Jun 19, 2026Exploit executed — $50K drained via spot price manipulation
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)