What happened
On March 20, 2025, BBX Token (BSC) suffered a $12,000 loss due to a liquidity pool manipulation attack exploiting its _transfer() function.
On March 20, 2025, the BBX Token contract on BNB Smart Chain (BSC) was exploited due to a flaw in its _transfer() function, which burned liquidity pool tokens and forced a sync() call on PancakeSwap. The attacker repeated this process 252 times, causing a pool imbalance and manipulating the token’s price. Once the reserves were distorted, they executed a swap via PancakeRouter, extracting value at a favorable rate.
The stolen funds were then laundered through Tornado Cash, making recovery difficult.
Case & protocol details
Evidence & learning
Attack pattern
Compare incidents →Sources and on-chain records
- report Report blog.solidityscan.com
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.