Orion Hack

Reported loss $994K
BNB Chain
Other

What happened

On May 28, 2024, TradeOnOrion was exploited after an attacker manipulated an account's liabilities array and then used a PancakeSwap flash loan to bypass borrowing health checks. Verichains estimated about $645,000 in assets withdrawn, which differs from the stored $994,000 figure.

How it happened

  1. The attacker deposited ORN, called lockStake, and then used requestReleaseStake and redeemAtomic to create duplicate liability entries.
  2. Repeating the pattern left the account with liabilities inconsistent with its asset balance.
  3. A PancakeSwap flash loan changed the balance so the liability value became positive rather than negative.
  4. The manipulated account bypassed the health check, borrowed additional assets, and repaid the flash loan.

Protocol details

Classification Exchange (DEX) / Access Control
Protocol Type Exploit/Other
Affected asset / contract ORN
Implementation language Solidity
Protocol links Website @TradeOnOrion

Evidence

Understand the attack patterns

Compare incidents →
Access Control Attacks

Same attack technique

Browse all hacks →
BNB Chain WebKeyDao $737K lost Ethereum Vow $1.2M lost Arbitrum Predy finance $464K lost Ethereum MEV Bot $2.0M lost

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes