BeatXswap Contract Suffers Oracle Manipulation Attack, Resulting in Loss of Approximately $63,700

On September 9, the LiquidityVestingConvert contract related to BeatXswap on the BNB Chain was subjected to an oracle manipulation attack, resulting in a loss of approximately $63,700. The contract directly reads real-time prices from the PancakeSwap V3 pool and lacks protective measures such as time-weighted pricing. The attacker lowered the pool price through a flash loan and then called the deposit function, causing the contract to inject approximately 3.07 million of its own BTX into the liquidity position based on the distorted quote, subsequently profiting around 63,700 USDT from reverse trading, which led to the depletion of BTX in the pool.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.