Digital Asset
Intelligence
Security Incident · BSC Ecosystem

MT-WBNB liquidity pool Reserve Manipulation Attack: $242.00K Reported Loss

·Historical incident record

Incident Overview

According to BlockSec Phalcon's monitoring, a suspicious transaction targeting the MT-WBNB liquidity pool on BSC was detected several hours ago, resulting in an estimated loss of approximately $242,000. The root cause lies in a flaw within the buyer restriction mechanism: under deflationary mode, normal buy orders were reverted; however, the router and pair addresses were whitelisted. The attacker bypassed these restrictions by swapping and removing liquidity through the router to acquire MT tokens from the pair. Subsequently, the attacker sold MT to accumulate a pendingBurnAmount and invoked the distributeFees() function to directly burn MT from the trading pair, artificially inflating the price. This allowed the attacker to swap MT back for WBNB to realize a profit. Furthermore, a referral rule that allowed the transfer of the first 0.2 MT to bypass buyer restrictions enabled the attacker to initiate the exploit.

Sources & References

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodReserve Manipulation Attack
    Reported loss$ 131,000
  2. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 8,435
  3. Incident date
    Attack methodReserve Manipulation Attack
    Reported loss$ 679,000
  4. Incident date
    Target

    DBXen

    Attack methodSmart Contract Vulnerability
    Reported loss$ 150,000
  5. Incident date
    Target

    Gondi V3

    Attack methodSmart Contract Vulnerability
    Reported loss$ 230,000