Incident Overview
On June 4, 2026, the ATM token protocol on the BNB Chain was exploited for approximately $243,500 due to a fatal logic flaw in its custom transfer function mechanism.
The core vulnerability resided within the protocol's customized transferFrom() function logic. The contract was engineered with an embedded taxation mechanic designed to automatically route and convert approximately 20% of the transferred transaction amounts into BSC-USD (wrapped USDT/USDC on BNB Chain). However, the contract lacked sufficient operational checks and balance-state validation during the internal swap execution path.
By leveraging this flaw, the attacker executed a sequence of repetitive, cyclical token transfers. Each automated iteration forced the smart contract to interact with its market liquidity pair, extracting BSC-USD and transferring it out of the protocol's reserves to satisfy the faulty reward or burn calculation. By looping this permissionless transfer sequence, the attacker incrementally bled the contract's treasury, netting roughly $243,500 before swapping the proceeds and completing the exploit.
Attack Transaction: 0x37b90a33…dcfd86
Incident Report
Protocol Information
Market Context at Time of Hack
What the Attacker Needed to Succeed
Understanding the prerequisites for this type of attack helps auditors identify protocols that are most at risk and helps developers build better defenses.
What Auditors Should Check
If you're auditing a protocol with similar architecture to ATM Token, these are the critical security checks that could have prevented this incident (June 2026).
- Verify all logic paths related to Other are guarded by proper access controls and input validation
- Review privileged functions (owner, admin, governance) for potential abuse vectors - centralization risks should be documented and bounded with timelocks or multi-sigs
Master these auditing techniques with hands-on labs and real exploit scenarios in the Smart Contract Hacking course.
Free TrialProof-of-Concept Exploits
On-Chain Evidence & References
- Reference https://hacked.slowmist.io
Sources & References
Learn to Prevent the Next ATM Token
The ATM Token hack is one of many attacks that skilled auditors are trained to detect before deployment. Master real exploit patterns and defense techniques with hands-on Web3 security training.