What happened
On August 26, 2025, BetterBank's bonus-token logic was exploited on PulseChain. Nominis reported approximately $5 million affected and $2.7 million recovered. The attacker repeatedly minted ESTEEM and exchanged it for FAVOR, then other assets.
Technical root cause
Bonus-token reward logic permitted repeated unauthorized ESTEEM minting.
How it happened
- The attacker abused the bonus-token contract to repeatedly mint ESTEEM.
- ESTEEM was converted into FAVOR and then into other assets.
- BetterBank paused the protocol and removed pool liquidity to protect remaining assets, according to Nominis.
Protocol details
Classification
Protocol Logic / Borrowing and Lending
Protocol Type
Lending
Implementation language
Solidity
Protocol links
Website
@BetterBank_io
Security review history
- Zokyo View report
Evidence
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
