CertiK reports flash-loan oracle attack on CoreVault draining InsurancePool
CertiK Alert reported that a flash-loan-funded oracle attack inflated a CoreVault redemption roughly 33 times, depleting InsurancePool. The post states the attacker ended with 160.26 BNB (~$112.2K) after reversing the trade.
Why “Unverified”
- Reported by CertiK Alert alone, with no second source or primary confirmation yet
1 independent source group across 1 post · evidence score 68/100. How labels work
Market around the story
| Asset | Price at first report | 6h before | 1h before | 1h after | 6h after | 1h move vs normal | 24h volume vs median |
|---|---|---|---|---|---|---|---|
| BNB | $692.04 | −0.59% | −0.49% | −0.90% | +1.5% | 2.0σ | 1.1× |
Returns are measured from the moment the story first appeared. “vs normal” compares the move with the asset's typical hourly move over the previous 30 days.
What the sources claim
-
A flash-loan-funded oracle attack inflated a CoreVault redemption about 33 times.
“A flash-loan-funded oracle attack inflated a CoreVault redemption ~33×”
CertiK Alert -
The attack depleted InsurancePool.
“depleting InsurancePool”
CertiK Alert -
The attacker was left with 160.26 BNB (~$112.2K) after reversing the trade. BNB
“leaving the attacker with 160.26 BNB (~$112.2K) after reversing the trade”
CertiK Alert
Sources
- #CertiKAlert 🚨 → bscscan.com
More on BNB
Summary and claims extracted by AI with prompt analyze-story@5 on 2026-11-05 00:00 UTC. Labels are computed from the sources, not by the model.