Hack history / 2026 / Hack or exploit
BYToken
Hack or exploit on Jun 4, 2026 · Smart Contract Vulnerability
ONE SOURCE · 1 SOURCE
Lost
$87K
dollars at the time
Returned
none listed
as the sources state it
Rank
#1,785
among thefts by dollars lost
What happened
The public triggerAutoBurn() maintenance function in BYToken contract on BSC was abused. The attacker took a Moolah flashloan (~422k WBNB), performed Pancake swaps, then called the unprivileged function. This burned ~67.8 quadrillion BY directly from the BY/WBNB pair and called pair.sync(), rewriting reserves to 1 BY + full WBNB. The extreme skew allowed massive BY sells to drain nearly all WBNB liquidity, netting the attacker ~146.60 BNB ($87,402).
Details
- Date
- Jun 4, 2026
- Kind
- Hack or exploit
- Method
- Smart Contract Vulnerability
- How in
- Price, oracle and governance
- Target
- not stated
- Chains
- BNB Chain
Reported by
Related incidents
BYToken 2026 · Hack or exploit · $87K
RsETHSafeModule 2026 · Hack or exploit · $7.7M
Third-party Gnosis Safe Module (SquidRouterModule) 2026 · Hack or exploit · $3.2M
Haedal Vault 2026 · Hack or exploit · $915K
NEM（NemTokenV2） 2026 · Hack or exploit · $822K
RsETHSafeModule 2026 · Hack or exploit · $7.7M
Third-party Gnosis Safe Module (SquidRouterModule) 2026 · Hack or exploit · $3.2M
Haedal Vault 2026 · Hack or exploit · $915K
NEM（NemTokenV2） 2026 · Hack or exploit · $822K
Cite this page
SwanBluechip, "BYToken hack, Jun 4, 2026: $87K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht584cb2e5ca/ (data as of 2026-10-31).