Digital Asset
Intelligence
Security Incident · BSC Ecosystem

ApeBond Smart Contract Vulnerability: $3.42K Reported Loss

·Historical incident record

Incident Overview

ApeBond's ApeYieldVault smart contract on BSC was exploited. The attacker used a public helper contract to call migrateToVotingEscrow with duplicate pool IDs, inflating a lock amount from ~1.71 quadrillion ABOND to ~29 quadrillion ABOND. They then unlocked, claimed the inflated lock, sold ABOND in the public ABOND/WBNB pool, repaid a Moolah flashloan, and kept ~5.72 WBNB profit. The entire flow was permissionless and on-chain.

Sources & References

Original incident referencehttps://x.com/clarahacks/status/2062564868130029636 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    ATM

    Attack methodSmart Contract Vulnerability
    Reported loss$ 243,500
  2. Incident date
    Target

    BYToken

    Attack methodSmart Contract Vulnerability
    Reported loss$ 87,402
  3. Incident date
    Attack methodBusiness Logic Vulnerability
    Reported loss$ 35,041
  4. Incident date
    Target

    AROS

    Attack methodSmart Contract Vulnerability
    Reported loss$ 295,300
  5. Incident date
    Target

    ATOHook

    Attack methodSmart Contract Vulnerability
    Reported loss$ 25,000