Security Incident · BSC Ecosystem
BYToken Smart Contract Vulnerability: $87.40K Reported Loss
The public triggerAutoBurn() maintenance function in BYToken contract on BSC was abused.
- Reported loss
- $ 87,402
- Attack category
- Smart Contract Vulnerability
Incident Overview
The attacker took a Moolah flashloan (~422k WBNB), performed Pancake swaps, then called the unprivileged function. This burned ~67.8 quadrillion BY directly from the BY/WBNB pair and called pair.sync(), rewriting reserves to 1 BY + full WBNB. The extreme skew allowed massive BY sells to drain nearly all WBNB liquidity, netting the attacker ~146.60 BNB ($87,402).
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.