BEVO Reward Mechanism Flaw: $45.00K Reported Loss
The BEVO NFT Art Token (BEVO) on BSC was exploited with a total loss of approximately $45,000.
- Reported loss
- $ 45,000
- Attack category
- Reward Mechanism Flaw
Incident Overview
The root cause is that BEVO is a deflationary token, and the attacker calls the function deliver(), the value of _rTotal will decrease, which will further affect the return value of getRate() used to calculate the balance. After the attacker manipulates the token balance, he calls the function skim to transfer the increased PancakePair balance to his own account. Finally, the attacker calls the function deliver() again and exchanges the increased BEVO back to WBNB.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.