DCT Token Hack

On November 2024, an unknown DCT token on Binance Smart Chain (BSC) suffered an attack, resulting in losses exceeding $428K.

The exploit leveraged a design flaw in the DCT token’s transfer mechanism, which included a forced investment feature. When DCT tokens were sent to the USDT-DCT liquidity pool, 5% of the transferred tokens were automatically swapped for USDT and added to the liquidity pool. This triggered a price swap in the USDT-DCT pool, which the attacker manipulated to inflate the price of DCT tokens.

By exploiting this mechanism, the attacker executed profitable swaps, draining the pool and realizing significant financial gains.

Exploit tx:

https://bscscan.com/tx/0xb3759329…efd6fd