VERDICT —UNRATED
Verdict pending. Auto-ingested incidents are reviewed before a public verdict is rendered.
Root cause
Root-cause analysis not yet published. The incident description below contains all currently available signal — review the attack transaction directly for definitive forensics.
Forensic narrative
The JUDAO token / liquidity pool on BSC was exploited via Flashloan-assisted Manipulation. The attacker used flash loans to manipulate pool reserves or pricing, draining funds through PancakeSwap V2 routes (e.g., BUSD-JUDAO pair). Losses included at least 205,259 USDT plus 36 BNB. Attack method (per SlowMist): Price Manipulation. Reported loss: $ 228,000.
Primary source
https://x.com/DefimonAlerts/status/2049019388947321334 ↗Sourced from
slowmist
Technical record
- chain
- bsc
- protocol
- JUDAO
- bug_class
- oracle
- date_occurred
- 2026-04-28
- loss_usd
- $228,000
- source_id
- sm:judao::2026-04-28
Related — same bug class· oracle