Security Incident · BSC Ecosystem
SKP Smart Contract Vulnerability: $212.85K Reported Loss
On BSC, the SKP token suffered a token-side LP balance drain + sync attack.
- Reported loss
- $ 212,850
- Attack category
- Smart Contract Vulnerability
Incident Overview
The attacker profited approximately $212.85k in a single transaction (162,854.21 USDT + 75.88 BNB). The root cause was a flaw in SKP token logic that allowed extra SKP tokens to be transferred out from the Pancake V2 SKP/USDT LP after a large buy, followed by calling sync() to write incorrect reserves, pushing the SKP reserve close to zero. The attacker used flash loans to amplify the attack.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.