BlockSec: USDC-OCA liquidity pool on BSC chain attacked, hacker exploits deflation mechanism vulnerability to steal $422,000

BNB4.02%

PANews February 14 News, according to BlockSec Phalcon monitoring, an unknown USDC-OCA liquidity pool on the BSC chain was attacked, resulting in approximately 422,000 USDC being withdrawn. The attacker exploited a logical vulnerability in the deflationary OCA token’s sellOCA() function, which, each time it was called to swap OCA tokens, also removed an equivalent amount of OCA from the liquidity pool, artificially inflating the token’s price within the pool.

The attack was completed in three transactions: the first executed the attack operation, while the remaining two were mainly used to pay additional block builder bribes. The attacker paid a total of about 43 BNB plus 69 BNB to 48club-puissant-builder, with an estimated profit of approximately $340,000. Another transaction in the same block at position 52 failed, suspected to have been front-run by the attacker.

View Original
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to Disclaimer.

Related Articles

New Wallet Deploys $2M USDC for Leveraged NVDA Long Position on Hyperliquid

Gate News bot message, a newly created wallet deposited 2 million USDC into Hyperliquid 11 hours ago to establish a long position on NVDA with 2x leverage. The position holds 21,687 xyz:NVDA valued at $3.97 million.

GateNewsBot3h ago

Trader PuzzleTricker bets on Barcelona winning the King's Cup, with a single "big win" of $2.12 million.

Odaily Planet Daily reports that, according to Lookonchain monitoring, trader PuzzleTricker (0x003...6beb) on February 12 spent 3.23 million USDC betting on FC Barcelona to win the Copa del Rey. The trader made a profit of up to 2.12 million USD after the win.

GateNewsBot02-13 07:47

Chainalysis: Human Trafficking Crypto Funds Increase by 85%, Stablecoins Become a Tool for Southeast Asian Crime

The amount of cryptocurrency inflow suspected to be linked to human trafficking networks is projected to increase by 85% in 2025, but crypto analytics firm Chainalysis states that blockchain transparency could help disrupt these networks' operations. Chainalysis reported on Thursday that the total transaction volume flowing to suspected trafficking networks (primarily located in Southeast Asia) "reached hundreds of millions of dollars in identified services."

MarketWhisper02-13 06:22

Trove Markets secretly refunded KOLs after the coin price plummeted, and ICO participants suffered heavy losses.

Bubblemaps disclosed on the X platform that Trove Markets refunded KOLs who participated in the pre-sale, but other investors suffered heavy losses. After the token collapse, it was found that the project team engaged in improper conduct towards investors and was suspected of improper fund flows, leading to strong community dissatisfaction and a significant drop in the token price.

GateNewsBot02-13 02:02

Lighter and Circle reach an agreement on USDC deposit yield sharing

PANews February 12 News, the stablecoin yield platform Lighter has partnered with USDC issuer Circle to share the earnings generated from approximately $920 million USDC deposits on the platform. Previously, Lighter had attracted about $920 million USDC into the platform, and this agreement will distribute the interest income from these funds between Lighter and Circle.

GateNewsBot02-12 14:41
Comment
0/400
No comments
Trade Crypto Anywhere Anytime
qrCode
Scan to download Gate App
Community
English
  • 简体中文
  • English
  • Tiếng Việt
  • 繁體中文
  • Español
  • Русский
  • Français (Afrique)
  • Português (Portugal)
  • Bahasa Indonesia
  • 日本語
  • بالعربية
  • Українська
  • Português (Brasil)