What happened
On April 19, 2023, an attacker hacked the Ocean Life token on Binance Smart Chain (BSC), using a flawed mechanism to lower the token supply and manipulate the price. The attacker earned 32 WBNB in return for their actions.
The attacker used a flash loan of 969 WBNB from DPPOracle and converted it to OLIFE tokens using PancakeSwap. By internally calling the '_reflectFee' function through the transfer function, the attacker decreased the total value of _tTotal. However, the balance of the pool was much higher after accumulation, as computed using balanceOf(), and the hacker used a direct call to swap to withdraw $WBNB from the pool.
The attacker then returned the 969 WBNB flashloan and transferred the 32 WBNB profit to another address.
Attacker's transaction:
https://bscscan.com/tx/0xa21692ff…caab0a
Attacker address:
https://bscscan.com/address/0xfb8ef8de…dd41b7
Stolen funds address:
https://bscscan.com/address/0x662D2dC4…F0726B
Case & protocol details
Evidence & learning
Attack pattern
Compare incidents →Sources and on-chain records
- report Report twitter.com
- analysis Website reference binance.com
- analysis Blog reference blog.solidityscan.com
- analysis Website reference twitter.com
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.