Security Incident · BSC Ecosystem
ApeBond Smart Contract Vulnerability: $3.42K Reported Loss
ApeBond's ApeYieldVault smart contract on BSC was exploited.
- Reported loss
- $ 3,421
- Attack category
- Smart Contract Vulnerability
Incident Overview
The attacker used a public helper contract to call migrateToVotingEscrow with duplicate pool IDs, inflating a lock amount from ~1.71 quadrillion ABOND to ~29 quadrillion ABOND. They then unlocked, claimed the inflated lock, sold ABOND in the public ABOND/WBNB pool, repaid a Moolah flashloan, and kept ~5.72 WBNB profit. The entire flow was permissionless and on-chain.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.