What happened
AI Data Credit (AIDC) on BNB Chain was exploited for about $121K after a token transfer-accounting flaw was used to manipulate the AIDC/WBNB pool and drain WBNB.
Technical root cause
A custom sell-burn accumulator incorrectly debited the AIDC/WBNB LP reserve during the token transfer path, allowing an attacker to manipulate pool accounting and extract WBNB.
How it happened
- The documented transaction exploited a custom sell-burn accumulator that debited the AIDC/WBNB LP reserve incorrectly.
- The attacker manipulated the pair's reserves, then extracted roughly 220.13 WBNB.
Protocol details
Classification
Token & Share Accounting / Token
Protocol Type
Exploit/Other
Implementation language
Solidity
Attacker Address
0x89eb2c99e970d831525c7a52badc290afa116b63
Exploit Transaction
0x66960f7febf399fa8b…450342645e
Evidence
- report @SlowMist_Team incident report x.com
- transaction AIDC exploit transaction bscscan.com
- address AIDC token contract bscscan.com
- code AIDC exploit reproduction github.com
- analysis DeFiLlama defillama.com
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
