Defimon Alerts said a BeatXswap-related contract on BNB Chain was exploited in an oracle manipulation attack on Sept. 9, with losses estimated at about $63,700. The affected contract, LiquidityVestingConvert, reportedly pulled live pricing directly from a PancakeSwap V3 pool and did not include protections such as time-weighted pricing. According to the alert, the attacker used a flash loan to push down the pool price and then called the deposit function, allowing the contract to inject roughly 3.07 million of the attacker’s own BTX into a liquidity position at a distorted valuation. The attacker then reversed the trade and made about 63,700 USDT in profit. Defimon Alerts added that BTX in two attributed pools was drained in the process.
Defimon Alerts said the BeatXswap-related LiquidityVestingConvert contract on BNB Chain was hit by an oracle manipulation attack on Sept. 9, resulting in losses of about $63,700.
According to the alert, the contract read live prices directly from a PancakeSwap V3 pool and lacked protections such as time-weighted pricing. The attacker used a flash loan to push the pool price lower, then called the deposit function, causing the contract to inject roughly 3.07 million of the attacker’s own BTX into a liquidity position at the distorted quote. The attacker then reversed the trade and made about 63,700 USDT in profit, while BTX in two attributed pools was drained.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.