Live · updated 1 minute ago · 140 stories in 24h

← Stream
Hacks & Security Unverified First seen

CertiK reports flash-loan oracle attack on CoreVault draining InsurancePool

CertiK Alert reported that a flash-loan-funded oracle attack inflated a CoreVault redemption roughly 33 times, depleting InsurancePool. The post states the attacker ended with 160.26 BNB (~$112.2K) after reversing the trade.

Why “Unverified”

  • Reported by CertiK Alert alone, with no second source or primary confirmation yet

1 independent source group across 1 post · evidence score 68/100. How labels work

Market around the story

AssetPrice at first report6h before1h before1h after6h after1h move vs normal24h volume vs median
BNB $692.04 −0.59% −0.49% −0.90% +1.5% 2.0σ 1.1×

Returns are measured from the moment the story first appeared. “vs normal” compares the move with the asset's typical hourly move over the previous 30 days.

What the sources claim

  1. A flash-loan-funded oracle attack inflated a CoreVault redemption about 33 times.

    “A flash-loan-funded oracle attack inflated a CoreVault redemption ~33×”
    CertiK Alert
  2. The attack depleted InsurancePool.

    “depleting InsurancePool”
    CertiK Alert
  3. The attacker was left with 160.26 BNB (~$112.2K) after reversing the trade. BNB

    “leaving the attacker with 160.26 BNB (~$112.2K) after reversing the trade”
    CertiK Alert

Sources

More on BNB

All BNB stories →

Summary and claims extracted by AI with prompt analyze-story@5 on 2026-11-05 00:00 UTC. Labels are computed from the sources, not by the model.