What happened
On February 14, 2026, SOF token on BNB Smart Chain was exploited for approximately $248,626 through a sell-path reserve manipulation.
Technical root cause
SOF's sell path burned tokens from the liquidity pool and called sync() before calculating the BSC-USD output. That reserve update distorted the pool price used for the withdrawal.
How it happened
The attacker used flash liquidity to acquire SOF, sold tokens into the pool, triggered the token's burn and sync behavior, then extracted BSC-USD at a distorted pool price.
Protocol details
Classification
Token
Protocol Type
Exploit/Flash Loan Attack
Affected asset / contract
SOF
Evidence
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
