Security Incident · BSC Ecosystem
Paraluni Reentrancy Attack: $1.70M Reported Loss
The metaverse financial project Paraluni on the BSC chain was hacked, and the hackers made more than $1.7 million in profits.
- Reported loss
- $ 1,700,000
- Attack category
- Reentrancy Attack
Incident Overview
The problem lies in the depositByAddLiquidity method of the MasterCheif contract of the project side. This method does not check whether the token array parameter address[2] memory _tokens matches the LP pointed to by the pid parameter, and does not add lock when the LP amount changes.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.