BSC DTXT/USDT trading pair attacked, losing 35,041 USDT

iconKuCoinFlash
Share
Share IconShare IconShare IconShare IconShare IconShare IconCopy
AI summary iconSummary

expand icon
On June 5, the DTXT/USDT trading pair on BSC suffered a major exploit, resulting in the loss of approximately 35,041 USDT. Attackers exploited a contract vulnerability by sending a small amount of USDT directly to the trading pair address, bypassing sell fees. The theft was facilitated by a 1,077,400 USDT flash loan from Moolah. The incident underscores a significant decline in trading activity and has raised concerns about smart contract security on high-volume trading pairs.

BlockBeats report, June 5: According to SlowMist monitoring, the DTXT/USDT trading pair on BNB Chain was attacked, resulting in a loss of approximately 35,041 USDT. The root cause of the attack was that the DTXT contract determined transaction types by comparing USDT balances with the trading pair’s reserve amounts. The attacker directly transferred a small amount of USDT to the trading pair address, causing a large DTXT sell order to be incorrectly classified as adding liquidity, thereby bypassing the sell fee logic.


The attacker borrowed 1.0774 million USDT via a flash loan from Moolah and profited approximately 35,000 USDT.

Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.