FortuneWheel Hack

Reported loss $21.0M
Other

What happened

On January 10, 2025, an attacker exploited FortuneWheel's public fee-conversion routine on BNB Chain. It flash-manipulated the WBNB/LINK pool price, then triggered a mispriced protocol swap and earned 30.968 WBNB, valued at about $21,500 in the reviewed reconstruction.

How it happened

  1. The attacker flash-borrowed 4,300 WBNB and swapped it for LINK, sharply raising LINK's spot price in the WBNB/LINK pool.
  2. It called FortuneWheel's permissionless swapProfitFees() routine.
  3. The routine used the manipulated spot price to calculate an excessive BNBP sale and then bought LINK with no minimum-output protection.
  4. The attacker reversed its LINK trade, repaid the loan, and retained 30.968 WBNB.

Protocol details

Classification Gaming / Metaverse
Protocol Type Exploit/Other

Evidence

Same attack technique

Browse all hacks →
Malda (prev. Mendi Finance) $273K lost Peapods Finance $4K lost FEG (Feed Every Gorilla) $900K lost CryptoBottle $527K lost

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes