Skip to content
Est. MMXXVIVol. VI · № 273RSS
Blockchain Breaches

An archive of cryptocurrency security incidents — hacks, exploits, bridge failures and rug pulls, documented with on-chain evidence.

Dossier № 039Flash Loan Attack

Wault Finance Flash-Loan Drain

Wault Finance on BNB Chain lost ~$1M when a flash-loan manipulation of WUSD/WEX pricing let the attacker mint and redeem at skewed rates, draining reserves.

Date
Chain(s)
Status
Funds Stolen

In June 2021, the BNB Chain protocol Wault Finance lost approximately $1 million to a flash-loan manipulation of the WUSD/WEX pricing its mint/redeem logic relied on. The attacker skewed the pool, minted/redeemed at the manipulated rate, repaid the loan, and walked.

What happened

Wault's stablecoin/reward pricing read manipulable pool state. A flash loan distorted it; the attacker extracted ~$1M via skewed mint/redeem.

Why it matters

Wault Finance is one more BSC-2021 flash-loan oracle data point (Spartan, PancakeBunny, AutoShark, Belt). Its only distinctive contribution is density: BSC's mid-2021 growth window produced this identical bug class weekly, across dozens of fast forks, every one of them avoidable with the freely-available 2020 defense. The catalogue's BSC-2021 cluster is the single strongest illustration of "a hype-driven fork wave re-running the same prior month's mistake faster than any post-mortem can propagate."

Sources & on-chain evidence

  1. [01]halborn.comhttps://www.halborn.com/blog/post/explained-the-wault-finance-hack-june-2021
  2. [02]rekt.newshttps://rekt.news/wault-finance-rekt

Related filings