Digital Asset
Intelligence
Security Incident · BSC Ecosystem

InsurancePool/CoreVault Flash Loan Attack: $112.30K Reported Loss

·Source-attributed incident record

Incident Overview

On November 3, 2026, the InsurancePool and CoreVault contracts on BSC were attacked, resulting in a loss of approximately $112,300 (about 160.26 BNB). The attacker used a flash loan to manipulate liquidity pool prices/oracle, inflating a CoreVault redemption by about 33 times to extract excess funds from the InsurancePool before repaying the loan.

Sources & References

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodPrivate Key Leakage
    Reported lossNot disclosed
  2. Incident date
    Attack methodPrivate Key Leak
    Reported loss$ 397,708
  3. Incident date
    Target

    Diamante

    Attack methodPrivate Key Leakage
    Reported lossNot disclosed
  4. Incident date
    Attack methodUnknown
    Reported lossNot disclosed
  5. Incident date
    Attack methodUnknown
    Reported loss$ 49,000,000