Digital Asset
Intelligence
Security Incident · BSC Ecosystem

Safemoon Contract Vulnerability: $8.90M Reported Loss

·Historical incident record

Incident Overview

Safemoon, a DeFi protocol based on the BNB chain, was attacked, and its liquidity pool lost nearly $8.9 million. Safemoon CEO John Karony said on Twitter: "This security incident affected the SFM:BNB LP pool and other LP pools on DEX were not affected. We have located the suspected vulnerability and fixed it. " According to analysis, the recent update may have introduced a "public destruction vulnerability", which facilitated hacker attacks. The hacker was able to use code functionality to artificially inflate the price of SFM tokens, then sell enough tokens back to the liquidity pool in the same transaction, effectively draining WBNB from the contract. On April 20, the SafeMoon attacker returned 80% of the stolen funds, that is, transferred 21,804 BNB (approximately $7.2 million) to the SafeMoon vault wallet, leaving the remaining 20% as a bounty.

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    FASTSWAP

    Attack methodFlash Loan Attack
    Reported loss26.77 BNB
  2. Incident date
    Target

    MetaPoint

    Attack methodContract Vulnerability
    Reported loss$ 920,000
  3. Incident date
    Attack methodContract Vulnerability
    Reported loss$ 728,000
  4. Incident date
    Attack methodPhishing Attack
    Reported loss$ 3,830,000
  5. Incident date
    Target

    EC token

    Attack methodRug Pull
    Reported loss$ 43,800