OSK CoreVault on BNB Chain loses ~$175K in exploit tied to oracle pricing flaw

𝕏/@exvulsec •

Revision history

4 recorded changes

🖱️ 19👤 13🤖 6

19 clicks·~3.3k impressions·0.6% CTR

Web Telegram Discord

Want your article here?

Promote with Leviathan News

The exploit stemmed from a pricing flaw in CoreVaultFarming._redeemPrincipalCore(), which settles via OracleLib.getAccountingPrices(). That function pushes the same-transaction Pancake WBNB/USDT spot price into a 3-sample window and returns the raw average, never invoking the library's spot/TWAP/average median selector. Net losses reached ~251.23 BNB (~$175K). The attacker seeded an 8-BNB position, flash-borrowed 207,358.41 WBNB, and retained ~152.26 BNB. The report urges the InsurancePool owner to sever the vulnerable Treasury and evacuate remaining reserves.

AI summary of the linked source — not editorial content.

OSK CoreVault on BNB Chain loses ~$175K in exploit tied to oracle pricing flaw

Explore the topic

More on Exploit

b14g recovers 68.15M CORE via hard fork after 97M exploit, user distribution pending

Talis halts listings after attacker exploits Injective contracts, taking 5,700 escrowed NFTs

USDT0 freezes 6.18M USDT0 on Polygon stolen in the Binance exploit

Core DAO says network is secure after b14g exploit drains 97M CORE; exchanges freeze deposits linked to the attacker

Arbitrum Security Council freezes 74.56M ARB and 8,425 ETH tied to Binance exploit in intermediary wallet

ZachXBT links $6.3B Binance and $388M Bitget exploits to one attacker after funds commingle at same address

b14g recovers 68.15M CORE via hard fork after 97M exploit, user distribution pending

Talis halts listings after attacker exploits Injective contracts, taking 5,700 escrowed NFTs

USDT0 freezes 6.18M USDT0 on Polygon stolen in the Binance exploit

Core DAO says network is secure after b14g exploit drains 97M CORE; exchanges freeze deposits linked to the attacker

Arbitrum Security Council freezes 74.56M ARB and 8,425 ETH tied to Binance exploit in intermediary wallet

ZachXBT links $6.3B Binance and $388M Bitget exploits to one attacker after funds commingle at same address

More on Exploit

b14g recovers 68.15M CORE via hard fork after 97M exploit, user distribution pending

Talis halts listings after attacker exploits Injective contracts, taking 5,700 escrowed NFTs

USDT0 freezes 6.18M USDT0 on Polygon stolen in the Binance exploit

Core DAO says network is secure after b14g exploit drains 97M CORE; exchanges freeze deposits linked to the attacker

Arbitrum Security Council freezes 74.56M ARB and 8,425 ETH tied to Binance exploit in intermediary wallet

ZachXBT links $6.3B Binance and $388M Bitget exploits to one attacker after funds commingle at same address

b14g recovers 68.15M CORE via hard fork after 97M exploit, user distribution pending

Talis halts listings after attacker exploits Injective contracts, taking 5,700 escrowed NFTs

USDT0 freezes 6.18M USDT0 on Polygon stolen in the Binance exploit

Core DAO says network is secure after b14g exploit drains 97M CORE; exchanges freeze deposits linked to the attacker

Arbitrum Security Council freezes 74.56M ARB and 8,425 ETH tied to Binance exploit in intermediary wallet

ZachXBT links $6.3B Binance and $388M Bitget exploits to one attacker after funds commingle at same address

Total stats

How to Earn

OSK CoreVault on BNB Chain loses ~$175K in exploit tied to oracle pricing flaw

Explore the topic

More on Exploit

b14g recovers 68.15M CORE via hard fork after 97M exploit, user distribution pending

Talis halts listings after attacker exploits Injective contracts, taking 5,700 escrowed NFTs

USDT0 freezes 6.18M USDT0 on Polygon stolen in the Binance exploit

Core DAO says network is secure after b14g exploit drains 97M CORE; exchanges freeze deposits linked to the attacker

Arbitrum Security Council freezes 74.56M ARB and 8,425 ETH tied to Binance exploit in intermediary wallet

ZachXBT links $6.3B Binance and $388M Bitget exploits to one attacker after funds commingle at same address

b14g recovers 68.15M CORE via hard fork after 97M exploit, user distribution pending

Talis halts listings after attacker exploits Injective contracts, taking 5,700 escrowed NFTs

USDT0 freezes 6.18M USDT0 on Polygon stolen in the Binance exploit

Core DAO says network is secure after b14g exploit drains 97M CORE; exchanges freeze deposits linked to the attacker

Arbitrum Security Council freezes 74.56M ARB and 8,425 ETH tied to Binance exploit in intermediary wallet

ZachXBT links $6.3B Binance and $388M Bitget exploits to one attacker after funds commingle at same address

Comments

More on Exploit

b14g recovers 68.15M CORE via hard fork after 97M exploit, user distribution pending

Talis halts listings after attacker exploits Injective contracts, taking 5,700 escrowed NFTs

USDT0 freezes 6.18M USDT0 on Polygon stolen in the Binance exploit

Core DAO says network is secure after b14g exploit drains 97M CORE; exchanges freeze deposits linked to the attacker

Arbitrum Security Council freezes 74.56M ARB and 8,425 ETH tied to Binance exploit in intermediary wallet

ZachXBT links $6.3B Binance and $388M Bitget exploits to one attacker after funds commingle at same address

b14g recovers 68.15M CORE via hard fork after 97M exploit, user distribution pending

Talis halts listings after attacker exploits Injective contracts, taking 5,700 escrowed NFTs

USDT0 freezes 6.18M USDT0 on Polygon stolen in the Binance exploit

Core DAO says network is secure after b14g exploit drains 97M CORE; exchanges freeze deposits linked to the attacker

Arbitrum Security Council freezes 74.56M ARB and 8,425 ETH tied to Binance exploit in intermediary wallet

ZachXBT links $6.3B Binance and $388M Bitget exploits to one attacker after funds commingle at same address

Total stats

How to Earn