PANews|2月 14, 2026 05:02
[BlockSec: USDC-OCA Liquidity Pool on BSC Exploited, Hacker Steals $422,000]
According to BlockSec Phalcon monitoring, an unknown USDC-OCA liquidity pool on the BSC chain was attacked, resulting in approximately 422,000 USDC being withdrawn. The attacker exploited a vulnerability in the deflationary sellOCA() logic of the OCA token, which removed an equivalent amount of OCA from the liquidity pool during each swap, artificially inflating the token price within the pool.
The attack was executed through three transactions: the first carried out the exploit, while the latter two were primarily used to pay additional bribes to block builders. The attacker paid a total of approximately 43 BNB and 69 BNB to the 48club-puissant-builder, ultimately profiting an estimated $340,000. Another transaction in the same block, at position 52, failed and is suspected to have been front-run by the attacker.
Share To
Timeline
HotFlash
APP
X
Telegram
CopyLink