What happened
On March 10, 2026, Movie Token (MT) on BNB Chain was exploited for about $242,000 after a flaw in its sell and burn accounting distorted the liquidity pool's reserves.
Technical root cause
Movie Token's sell logic both transferred the net sold tokens to the liquidity pair and added that same amount to pendingBurnAmount. The later burn removed tokens from the pair again, double-counting the balance and distorting pool reserves.
How it happened
- The attacker used a WBNB flash loan and temporary liquidity to accumulate MT, then triggered the public reward-distribution path.
- The path burned tokens from the pair based on a balance that had already been transferred to the pair, sharply distorting reserves before the attacker swapped MT back for WBNB.
Protocol details
Classification
Token & Share Accounting
Protocol Type
DeFi Protocol
Implementation language
Solidity
Attacker Address
0xDB0901A3254f47c0CE57fFFCE2C730Bc33A1c0e1
Exploit Transaction
0xfb57c980286ea8755a…3fc62dfca6
Evidence
- transaction Movie Token exploit transaction bscscan.com
- analysis DeFiLlama defillama.com
- analysis CertiK: Movie Token Incident Analysis certik.com
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
