Digital Asset
Intelligence
Security Incident · BSC Ecosystem

SKP Smart Contract Vulnerability: $212.85K Reported Loss

·Historical incident record

Incident Overview

On BSC, the SKP token suffered a token-side LP balance drain + sync attack. The attacker profited approximately $212.85k in a single transaction (162,854.21 USDT + 75.88 BNB). The root cause was a flaw in SKP token logic that allowed extra SKP tokens to be transferred out from the Pancake V2 SKP/USDT LP after a large buy, followed by calling sync() to write incorrect reserves, pushing the SKP reserve close to zero. The attacker used flash loans to amplify the attack.

Sources & References

Original incident referencehttps://x.com/TenArmorAlert/status/2059454844201562191 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    DxSale

    Attack methodOwnership Override Attack
    Reported loss$ 7,300,000
  2. Incident date
    Target

    YSDAO

    Attack methodReserve Manipulation Attack
    Reported loss$ 19,500
  3. Incident date
    Target

    AROS

    Attack methodSmart Contract Vulnerability
    Reported loss$ 295,300
  4. Incident date
    Attack methodMultisig Address Tampering
    Reported loss$ 15180000
  5. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 3,200,000