VERDICT —UNRATED
Verdict pending. Auto-ingested incidents are reviewed before a public verdict is rendered.
▰ METHOD
Undisclosed
Root cause
Root-cause analysis not yet published. The incident description below contains all currently available signal — review the attack transaction directly for definitive forensics.
Forensic narrative
According to BlockSec Phalcon's monitoring, the BCE-USDT pool on PancakeSwap (BSC chain) was exploited a few hours ago, resulting in a loss of approximately $679,000. The root cause lies in a vulnerability within the BCE token's burn mechanism. The attacker deployed two malicious contracts to bypass buy/sell restrictions and trigger the token burn, ultimately extracting about $679,000 from the pool by manipulating its reserves. Attack method (per SlowMist): AMM Reserve Manipulation. Reported loss: $ 679,000.
Sourced from
slowmist
Technical record
- chain
- bsc
- protocol
- PancakeSwap BCE-USDT
- bug_class
- unknown
- date_occurred
- 2026-03-23
- loss_usd
- $679,000
- source_id
- sm:pancakeswap-bce-usdt::2026-03-23
Related — same bug class