Leaderboard
1019All-time rank
M

MooCAKECTX

Nov 7, 2022

$140K
Lost
$140K
Recovered
$0
Net loss
$140K
Unrecovered0% recovered

On November 7, 2022, MooCAKECTX on BSC was exploited via a flashloan attack targeting the reward settlement logic, where the attacker borrowed 50,000 CAKE, pledged twice in the same transaction without reward settlement, and withdrew to profit approximately $143,921. The contract failed to settle previous rewards before reinvesting.

How the exploit worked

View reproducible PoC

FlashLoan Attack.

Lost: $140k

Source: DeFiHackLabs (SunWeb3Sec)

Target
DeFi
Classification
Token & Share Accounting
Technique
Incorrect Share Accounting
Attribution
Unknown
Chains
BSC

Event timeline

  1. Nov 7, 2022
    Exploit executed — $140K drained via incorrect share accounting
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents