Security Incident · ETH Ecosystem
Cyrus Finance Flash Loan Attack: $516.84K Reported Loss
The DeFi yield protocol Cyrus Finance (CyrusTreasury contract) on BNB Chain was exploited.
- Reported loss
- $ 516,840
- Attack category
- Flash Loan Attack
Incident Overview
The attacker used a flash loan to manipulate the PancakeSwap V3 ETH/USDT pool spot price, triggering a vulnerability in the withdrawUSDTFromAny function to over-extract liquidity from an LP position, profiting approximately $516,840 before laundering the funds via Tornado Cash in 9 batches.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.