CoreVault Exploit: Spot Price Fallback Drained 259 BNB
Originally published at panda-security.xyz At 21:50:20 UTC on 3 November 2026 , a single transaction on BNB Smart Chain drained 259.09 BNB from the reserve behind CoreVault , a BNB vault system tied to the OSK token. The attacker kept 160.26 BNB , which CertiK valued at about $112,200 . There was no stolen key and no reentrancy. The attacker borrowed about 207,000 WBNB, dumped most of it into…
We haven't written up this one. Dev.to has the full story — the link below goes straight to it.
