Hack history / 2022 / Hack or exploit
BXH
Hack or exploit on Sep 28, 2022 · Flash Loan Attack
ATTACK TX CONFIRMED ON CHAINSOURCES AGREE ON DATE AND LOSS · 2 SOURCES
Lost
$40K
dollars at the time
Returned
none listed
as the sources state it
Rank
#1,974
among thefts by dollars lost
What happened
The TokenStakingPoolDelegate contract updated by BXH after the last attack suffered another flash loan attack. The contract lost 40,085 USDT, and the attacker made a profit of 31,794 USDT after paying off the flash loan fee. After analysis, this attack is caused by the use of getReserves() in the contract's getITokenBonusAmount function to obtain the instantaneous quotation, so that the attacker can make a profit by manipulating the quotation.
Details
- Date
- Sep 28, 2022
- Kind
- Hack or exploit
- Method
- Flash Loan Attack
- How in
- Price, oracle and governance
- Target
- Centralized exchange
- Chains
- BNB Chain
Reported by
Related incidents
FEG 2022 · Hack or exploit · $1.9M
Fswap 2022 · Hack or exploit · $390K
MooCakeCTX 2022 · Hack or exploit · $144K
ATK 2022 · Hack or exploit · $120K
fomo-dao 2022 · Hack or exploit · $110K
Fswap 2022 · Hack or exploit · $390K
MooCakeCTX 2022 · Hack or exploit · $144K
ATK 2022 · Hack or exploit · $120K
fomo-dao 2022 · Hack or exploit · $110K
Cite this page
SwanBluechip, "BXH hack, Sep 28, 2022: $40K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htf05ab8db92/ (data as of 2026-10-31).