BNB Chain InsurancePool Suffers Flash Loan Attack with Losses of Approximately $111,000

On November 4, the InsurancePool/CoreVault on BNB Chain reportedly fell victim to a price manipulation attack. The attacker manipulated the liquidity pool price through a flash loan, triggering an unusually high redemption and profiting approximately 160.26 BNB (about $111,000, excluding gas fees). The attacker borrowed around $143.6 million in WBNB through Moolah, a subsidiary of Lista DAO, using large exchange transactions to manipulate the liquidity pool price. Subsequently, they triggered withdrawals from the InsurancePool via CoreVault, extracting 260.21 BNB, valued at approximately $180,300. The attacker then executed reverse exchange transactions and repaid the flash loan, ultimately obtaining about 160.26 BNB, valued at approximately $111,000.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.