BNIX / OSK (CoreVault) hacked for ~$181K

Rickler Feed (@rickler_feed), Nov 5, 2026, 08:07 UTC

BNIX / OSK (CoreVault) hacked for ~$181K Rootcause: The vault’s BNB principal redemption logic depended on a manipulable on-chain spot price that could be distorted within a single transaction via flash loan. Key technical failure redeemPrincipal() calculated the BNB amount to pay out as: bnbAmount = redeemableUsd × wbnbPerUsd / 1e18 The wbnbPerUsd price came from OracleLib.getAccountingPrices, which used a 3-source median. When the TWAP / average-price windows were empty or unfilled, the median degraded to the live PancakeSwap WBNB/USDT spot price. That spot price sits in a low-liquidity pa…

The excerpt is quoted from a public Telegram channel, which owns its text.

Read the original post on Telegram

News events that include this post

• BNIX / OSK (CoreVault) hacked for ~$181K

More posts from Rickler Feed · All channels