Security Incident
BXH Flash Loan Attack
The TokenStakingPoolDelegate contract updated by BXH after the last attack suffered another flash loan attack.
- Reported loss
- 40,085 USDT
- Attack category
- Flash Loan Attack
Incident Overview
The contract lost 40,085 USDT, and the attacker made a profit of 31,794 USDT after paying off the flash loan fee. After analysis, this attack is caused by the use of getReserves() in the contract's getITokenBonusAmount function to obtain the instantaneous quotation, so that the attacker can make a profit by manipulating the quotation.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.