What happened
On March 20, 2025, BBX Token on BNB Smart Chain lost approximately $12,000 in a PancakeSwap liquidity-pool manipulation attack. The attacker repeatedly triggered BBX transfer-side burns from the pool and reserve synchronization, then swapped against the skewed pool reserves at a favorable rate.
How it happened
- The attacker repeatedly invoked BBX transfers, including zero-amount transfers that still triggered the burn path.
- Each call removed BBX from the PancakeSwap pair and synchronized the altered reserves.
- Repeating the process skewed the pool price and depleted the pair balance.
- The attacker swapped through PancakeRouter against those manipulated reserves and extracted value.
Protocol details
Classification
Token / Oracle Manipulation
Protocol Type
Exploit/Other
Implementation language
Solidity
Evidence
- report Report blog.solidityscan.com
- analysis DeFiLlama defillama.com
- analysis BBX Token Hack Analysis blog.solidityscan.com
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
