BlockSec Reports $556,000 Attack on BNB Chain TENDRIL/USDT Liquidity Pool

BlockSec said its system detected an attack on the TENDRIL/USDT liquidity pool on BNB Chain several hours earlier, causing losses of about $556,000. According to Odaily, the attack exploited a security flaw in the token’s sell-tax logic. The attacker used flash-loan funds to buy TENDRIL, then triggered a 30% sell tax and the tax-processing contract, _poolControl. After tax tokens were sold, the contract called controlburn() and sync(), reducing the pool’s recorded TENDRIL reserves to nearly zero before the seller’s remaining tokens entered the pool. The attacker then used subsequent swaps to withdraw nearly all remaining USDT from the pool. The attacker used about 30.64 million USDT in flash-loan funds to manipulate the pool’s price and reserves, withdrew about 4.42 million USDT, and repaid the loan in the same transaction. The attacker transferred approximately $308,960 in profit.