Swan Treasury loses about $625,000 on BNB Chain after private key leak

Swan Treasury, a decentralized asset management protocol on BNB Chain, lost about $625,000 after a private key leak, according to monitoring by Defimon Alerts. The tracker said the attacker forged a valid signature to an address they controlled and bought STY at a 100x discount. The trade was carried out through a PancakeSwap flash loan, using roughly 19,700 USDT to acquire about 687,000 STY. The attacker then forged claim() and transfer signatures on a sibling contract and dumped the tokens into the STY/USDT pool, walking away with about 625,000 USDT in profit. Defimon Alerts said every ecrecover in the transaction resolved to a specific hardcoded signer, which points to a compromised key rather than a flaw in the signing logic. The incident was reported in a post linked by Foresight.