ATM Token Hack

REPORTED LOSS $244K
Low Other bsc

What happened

On June 4, 2026, ATM Token's BSC liquidity was exploited for approximately $243,500. The reported drain came from the ATM/USDT PancakeSwap pair.

Technical Root Cause

ATMToken's custom transfer path allowed its own token balance to be sold into the liquidity pair at zero minimum output during sells, while the anti-whale and sell-lock controls were keyed to easily reset per-address state.

Case & protocol details

Classification Token
Protocol Type Chain
Protocol Twitter/X @fasttoken_com
Attacker Address 0x7e7C1f0D567c0483f85e1d016718E44414CdBAFE
Exploit Transaction 0x37b90a337075cd2fee…aaa6dcfd86

How it happened

A reconstructed on-chain replay shows the attacker accumulated ATM, distributed it across fresh helper addresses, then sold those balances into the pumped ATM/USDT pair. Each sell retriggered the token's internal auto-swap, compounding the extraction from the pair.

Evidence & learning

Proofs of concept

2 available

Sources and on-chain records

Browse all hacks

Other incidents recorded with the same attack technique.

Nomic nBTC Bridge $3.1M
Aquifer $2.5M
Harmony $300K
Verus $7.5M

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes