What happened
On April 14, 2026, the MONA token's BurnAddress mechanism was used to drain the MONA/USDT liquidity pair on BNB Chain. The focal transaction realized about $60,950 in USDT; reporting places the incident in the April 13-14 window.
MONA's sell and BurnAddress logic allowed MONA to be removed from the LP later while the earlier sell had already paid out USDT. Calling sync after the delayed burn broke the expected reserve relationship and let the attacker separate the USDT proceeds from the MONA inventory.
How it happened
The attacker farmed MONA through fresh accounts, sold tokens to create deferred burn credit, bought nearly all MONA inventory from the pair, triggered the delayed burn through a zero-value transferFrom path, and sold a small remaining balance into a pool whose USDT reserves had not been reduced proportionally.
Protocol details
Market Context at Time of Hack
Evidence
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
