Hack history / 2026 / Hack or exploit
SKYDAO
Hack or exploit on Sep 30, 2026 · Swap Logic Flaw
IN REVIEWSOURCES DISAGREE ON DATE OR LOSS · 2 SOURCES
Lost
$183K
sources: $60K to $183K
Returned
none listed
as the sources state it
Rank
#1,513
among thefts by dollars lost
What happened
SKYDAO’s taxed sell flow called its pool controller before the seller’s net tokens were credited to the PancakeSwap V2 pair. The controller sold the 35% tax, moved the gross sell amount from the pair to the dead address through controlburn(), and called pair.sync(), causing the pair to record an almost-zero SKYDAO reserve. When the original transfer subsequently credited the net SKYDAO to the pair without updating that recorded reserve, the attacker exploited the balance/reserve mismatch through pair.swap() to extract USDT liquidity
In review: sources disagree on the loss.
Details
- Date
- Sep 30, 2026
- Kind
- Hack or exploit
- Method
- Swap Logic Flaw
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- BNB Chain
Reported by
Related incidents
DefiTuna Lending 2026 · Hack or exploit · $580K
GoonFi 2026 · Hack or exploit · $254K
Balancer V1 2026 · Hack or exploit · $250K
ATM 2026 · Hack or exploit · $244K
CCC 2026 · Hack or exploit · $117K
GoonFi 2026 · Hack or exploit · $254K
Balancer V1 2026 · Hack or exploit · $250K
ATM 2026 · Hack or exploit · $244K
CCC 2026 · Hack or exploit · $117K
Cite this page
SwanBluechip, "SKYDAO hack, Sep 30, 2026: $183K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htd254212045/ (data as of 2026-11-01).