What happened
On February 22, 2023, Dynamic Finance’s BNB Chain staking system was exploited for about 74 BNB. Analysis attributes the loss to incorrect reward accounting in StakingDYNA: a depositor’s timestamp was retained from its initial deposit, allowing later large deposits to earn rewards calculated across an earlier interval.
How it happened
- The attacker established a staking position with a small initial DYNA deposit.
- The attacker later obtained a large amount of DYNA using flash-loan funding.
- The attacker deposited the large position into StakingDYNA.
- Because the contract retained the initial deposit timestamp, reward calculation used an overstated duration.
- The attacker redeemed the inflated reward and capital, then repeated the pattern.
Protocol details
Classification
Yield Aggregator
Protocol Type
Exploit/Reentrancy
Affected asset / contract
DYNA
Protocol links
Website
Evidence
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
