PancakeSwap Exploit Post-Mortem: An attacker exploited a fee-on-transfer token vulnerability in a PancakeSwap liquidity pool, netting ~37.55 WBNB ($9K-$11K). This analysis was a task from Guild Academy to study DeFi vulnerabilities. Here's how it went down #Security #DeFi👇

It was an insightful session exploring the Kyberswap post-mortem with Guild Academy. Always exciting to dive into real world cases like this.

🧵 🚨 BREAKING: D3XAI got exploited for 190 BNB ($157K) in a single transaction on Aug 16, 2025. As an assignment, I was asked to evaluate the transaction flow and try to research the exploit by Guild Academy .

🚨On 16th of August, it might've gone under the radar, but about 3.3BNB(~$3k) was stolen from TOKENbnb in a subtle Price manipulation hack. 😅On assignment from Guild Academy I ventured on a hack post-mortem quest to shed light on what happened, quite interesting this one 👇🏾

So what did the attacker do?👀 Skewed reserves with flashloan, inflates "deserved", burns cheaper, claims overpay... You know? Classic oracle manipulation stuff, just because there was no TWAP/Slippage check to stop him, He must've felt so tuff😏

🚨 Calling all Security Researchers in Africa! 🚨 Something big is coming this November. 🔥

Join us this Thursday at 7:30 PM for another in-depth discussion on Ethereum Data Availability: Stack, Memory and Storage with Vickish | DevRel POPE H || popeh.onchain alienate.onchain featuring theCodedCoder PhantomOz and more. Don’t miss it! Set your reminder 👉 x.com/i/spaces/1mrGm…

2 days to go🚀 #Web3SecuritySummitAfrica2025

My first audit comp victory, divine karma explosion, let's transcend! 🔥🔥🔥🕉️🙏 Thanks to Cyfrin Updraft 🟩 , Guild Academy & SHERLOCK Pelz 🕵🏾‍♂️