What happened
BNO Pool was exploited due to incorrect reward calculation, resulting in a loss of 504,217 $USD.
The BNO pool, which supports both ERC20 and NFT staking, fell victim to an exploit. The attacker exploited an incorrect reward calculation issue and was able to drain the pool for 504,217 $USD. The exploit was executed in two transactions.
In the first transaction, the attacker drained over 700,000 $BNO tokens from the pool. The second transaction drained an additional 700,000 $BNO tokens, which were subsequently sold on PancakeSwap for $USDT.
Attacker Address:
Funds Holder Address: Address 0xdc10…c8cc
Malicious Transaction:
Malicious Contract Address:
Protocol details
Evidence
- report @peckshield incident report twitter.com
- analysis DeFiLlama defillama.com
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
